Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-43392 (GCVE-0-2025-43392)
Vulnerability from cvelistv5 – Published: 2025-11-04 01:15 – Updated: 2026-04-02 18:09
VLAI
EPSS
Summary
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.
Severity
4.3 (Medium)
CWE
- A website may exfiltrate image data cross-origin
Assigner
References
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | Safari |
Affected:
0 , < 26.1
(custom)
|
|
| Apple | iOS and iPadOS |
Affected:
0 , < 18.7.2
(custom)
Affected: 0 , < 26.1 (custom) |
|
| Apple | macOS |
Affected:
0 , < 26.1
(custom)
|
|
| Apple | tvOS |
Affected:
0 , < 26.1
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.1
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.1
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2025-43392",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-11-04T16:33:14.602418Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-11-05T14:45:33.989Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Safari",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A website may exfiltrate image data cross-origin",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-02T18:09:43.420Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/125632"
},
{
"url": "https://support.apple.com/en-us/125633"
},
{
"url": "https://support.apple.com/en-us/125634"
},
{
"url": "https://support.apple.com/en-us/125637"
},
{
"url": "https://support.apple.com/en-us/125638"
},
{
"url": "https://support.apple.com/en-us/125639"
},
{
"url": "https://support.apple.com/en-us/125640"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2025-43392",
"datePublished": "2025-11-04T01:15:34.041Z",
"dateReserved": "2025-04-16T15:24:37.118Z",
"dateUpdated": "2026-04-02T18:09:43.420Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-43392",
"date": "2026-05-30",
"epss": "0.00041",
"percentile": "0.12825"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2025-43392\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2025-11-04T02:15:46.083\",\"lastModified\":\"2026-04-02T19:20:38.663\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.\"},{\"lang\":\"es\",\"value\":\"El problema se abord\u00f3 con un manejo mejorado de las cach\u00e9s. Este problema est\u00e1 solucionado en iOS 18.7.2 y iPadOS 18.7.2. Un sitio web puede exfiltrar datos de imagen de origen cruzado.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-942\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"26.1\",\"matchCriteriaId\":\"CFF118CE-3F13-43BE-B250-5579E1C842EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"26.1\",\"matchCriteriaId\":\"6D51AEDC-9086-4010-B3BF-C652D65D09C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"26.1\",\"matchCriteriaId\":\"3981A7BE-BC98-4C6F-AE38-D68839368925\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"26.1\",\"matchCriteriaId\":\"290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"26.1\",\"matchCriteriaId\":\"7DFD3616-65CA-4E5C-849C-3C20ACBCB610\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"26.1\",\"matchCriteriaId\":\"9F9D7F76-13FB-407C-94E5-221B93021568\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/125632\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/125633\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/125634\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/125637\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/125638\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/125639\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/125640\",\"source\":\"product-security@apple.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-43392\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-11-04T16:33:14.602418Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-942\", \"description\": \"CWE-942 Permissive Cross-domain Policy with Untrusted Domains\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-11-04T16:34:04.830Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"Safari\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"26.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"26.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"26.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"26.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"26.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"26.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.7\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/125640\"}, {\"url\": \"https://support.apple.com/en-us/125637\"}, {\"url\": \"https://support.apple.com/en-us/125634\"}, {\"url\": \"https://support.apple.com/en-us/125638\"}, {\"url\": \"https://support.apple.com/en-us/125639\"}, {\"url\": \"https://support.apple.com/en-us/125632\"}, {\"url\": \"https://support.apple.com/en-us/125633\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The issue was addressed with improved handling of caches. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. A website may exfiltrate image data cross-origin.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"A website may exfiltrate image data cross-origin\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2025-12-17T20:46:32.134Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-43392\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-12-17T20:46:32.134Z\", \"dateReserved\": \"2025-04-16T15:24:37.118Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2025-11-04T01:15:34.041Z\", \"assignerShortName\": \"apple\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
NCSC-2025-0352
Vulnerability from csaf_ncscnl - Published: 2025-11-04 12:53 - Updated: 2025-11-04 12:53Summary
Kwetsbaarheden verholpen in Apple iOS en iPadOS
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Apple heeft kwetsbaarheden verholpen in iOS 26.1 en iPadOS 26.1.
Interpretaties: De kwetsbaarheden betroffen verschillende privacy- en beveiligingsproblemen, waaronder ongeautoriseerde toegang tot gebruikersgegevens, het risico van gegevensexfiltratie, en kwetsbaarheden in geheugenbeheer die konden leiden tot onverwachte systeemcrashes. Aanvallers konden mogelijk gevoelige informatie verkrijgen via misbruik van deze kwetsbaarheden, wat de integriteit en privacy van gebruikers in gevaar bracht. De updates bevatten verbeterde validatiemechanismen en restricties om deze risico's te mitigeren.
Oplossingen: Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: medium
CWE-61: UNIX Symbolic Link (Symlink) Following
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-125: Out-of-bounds Read
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-275: CWE-275
CWE-284: Improper Access Control
CWE-371: CWE-371
CWE-404: Improper Resource Shutdown or Release
iOS 26.1 and iPadOS 26.1 addressed a permissions issue that allowed apps to identify other installed apps by implementing additional restrictions.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved a privacy vulnerability that could allow malicious apps to capture sensitive information via screenshots through enhanced checks.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
The recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved issues related to unexpected system termination and kernel memory corruption through enhanced memory handling.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
The recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1 have resolved issues related to unexpected system termination and kernel memory corruption through enhanced memory handling.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 and iPadOS 26.1 have resolved the issue of malicious apps tracking users between installs through enhanced cache handling mechanisms.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates in visionOS 26.1 and various macOS, watchOS, iOS, iPadOS, and tvOS versions have enhanced symlink validation to prevent unauthorized access to protected user data.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates to visionOS 26.1 and various macOS, iOS, and tvOS versions have resolved the issue of apps potentially breaking out of their sandbox through improved entitlements.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, and visionOS 26.1 have resolved a logging issue that exposed sensitive user information through enhanced data redaction.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 and iPadOS 26.1 addressed a logic issue that previously allowed apps to access camera views before permission was granted, enhancing security checks.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates in visionOS 26.1 and macOS Sonoma 14.8.2 have resolved symlink vulnerabilities through enhanced validation, preventing potential sandbox breaches by applications.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A logging issue affecting sensitive user data was resolved in iOS 26.1 and iPadOS 26.1 through enhanced data redaction measures.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 and iPadOS 26.1 have resolved a permissions issue that previously allowed unauthorized access to restricted content from the lock screen through enhanced restrictions.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A permissions issue allowing app enumeration of installed applications has been resolved with enhanced restrictions in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
An out-of-bounds read vulnerability was mitigated through enhanced input validation, impacting multiple operating systems and potentially causing application crashes or memory corruption when handling malicious media files.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
An authorization issue concerning sensitive user data access has been resolved through enhanced state management in iOS 26.1 and macOS Sequoia 15.7.2.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A privacy issue related to user fingerprinting was resolved in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 by relocating sensitive data.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1 have resolved a permissions issue that could allow apps to fingerprint users through enhanced restrictions.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates in visionOS 26.1 and macOS Sonoma 14.8.2 have resolved unexpected system termination issues caused by memory handling through improved memory management techniques.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
An access issue related to sandbox restrictions has been resolved in visionOS 26.1 and macOS Sonoma 14.8.2, enabling sandboxed apps to observe system-wide network connections through additional restrictions.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
The issue of remote content loading despite the 'Load Remote Images' setting being off has been resolved in watchOS 26.1 and iOS 26.1 through the implementation of additional logic.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
The handling of environment variables issue, which posed a risk of unauthorized access to sensitive user data, has been resolved through enhanced validation in watchOS 26.1, iOS 26.1, iPadOS 26.1, and tvOS 26.1.
CWE-284 - Improper Access ControlAffected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 addressed an out-of-bounds access vulnerability that could lead to app crashes or memory corruption when handling malicious media files, with improved bounds checking implemented.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 and iPadOS 26.1 have resolved a potential process crash vulnerability caused by a malicious HID device through the implementation of improved bounds checks.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A privacy vulnerability in iOS 26.1 and macOS Sequoia 15.7.2 was resolved by removing code that could have allowed unauthorized access to sensitive user data.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates in iOS 26.1, iPadOS 26.1, and visionOS 26.1 addressed a privacy issue by eliminating sensitive data that could facilitate user fingerprinting.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1, iPadOS 26.1, macOS Sonoma 14.8.2, and macOS Sequoia 15.7.2 have resolved a privacy issue related to the handling of temporary files that could have allowed unauthorized access to sensitive user data.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1 have resolved the address bar spoofing issue through enhanced verification measures.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
An inconsistent user interface issue related to state management has been resolved across multiple operating systems, including watchOS, iOS, iPadOS, Safari, and visionOS, addressing potential spoofing risks from malicious websites.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates in iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1 addressed a privacy issue by removing sensitive data to prevent the bypassing of privacy preferences.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved a privacy issue regarding user preferences, enhancing the protection of sensitive user data from app access.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 and iPadOS 26.1 resolve device locking failures and improve bounds checks, enhancing overall system stability.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 and iPadOS 26.1 have addressed a logic issue that allowed physical access to a locked device, enabling the viewing of sensitive user information, through enhanced checks.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 and iPadOS 26.1 have addressed a vulnerability in Stolen Device Protection that could be exploited by an attacker with physical access, through the implementation of additional logic.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1 and iPadOS 26.1 have resolved the issue of keyboard suggestions displaying sensitive information on the lock screen by implementing restrictions on options available on locked devices.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Apple has resolved a data exfiltration issue in Safari and iOS through enhanced checks to prevent potential threats from malicious websites.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Apple has resolved the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced state management.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Apple has resolved the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced state management.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1, iPadOS 26.1, tvOS 26.1, Safari 26.1, and visionOS 26.1 have resolved unexpected process crashes caused by malicious web content through enhanced state management.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Safari 26.1 and various Apple operating systems have resolved unexpected process crashes caused by malicious web content through enhanced checks.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
iOS 26.1, iPadOS 26.1, tvOS 26.1, Safari 26.1, and visionOS 26.1 have addressed unexpected process crashes caused by malicious web content through enhanced memory management.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Apple has addressed the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced memory management techniques.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Apple has addressed the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced memory management techniques.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Safari 26.1 and various Apple operating systems have resolved unexpected process crashes caused by malicious web content through enhanced verification measures.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
The issue of unauthorized keystroke monitoring has been addressed in iOS 26.1 and iPadOS 26.1 through the implementation of improved checks.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Apple has addressed memory corruption vulnerabilities in Safari and iOS 26.1 through enhanced memory management techniques.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Apple has addressed memory corruption vulnerabilities in Safari and iOS 26.1 through enhanced memory management techniques.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A use-after-free vulnerability in various Apple operating systems was resolved through improved memory management, mitigating risks from potentially malicious web content.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
A buffer overflow vulnerability was addressed in Safari and various Apple operating systems, including visionOS, watchOS, iOS, iPadOS, and tvOS versions 26.1, through enhanced bounds checking to prevent unexpected process crashes from malicious web content.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Disabling array allocation sinking has resolved vulnerabilities in iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1, preventing unexpected process crashes from malicious web content.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
Safari 26.1 and related operating systems have resolved cross-origin image data exfiltration issues through improved cache handling.
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / iOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / iPadOS
|
vers:unknown/* |
References
57 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Apple heeft kwetsbaarheden verholpen in iOS 26.1 en iPadOS 26.1.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden betroffen verschillende privacy- en beveiligingsproblemen, waaronder ongeautoriseerde toegang tot gebruikersgegevens, het risico van gegevensexfiltratie, en kwetsbaarheden in geheugenbeheer die konden leiden tot onverwachte systeemcrashes. Aanvallers konden mogelijk gevoelige informatie verkrijgen via misbruik van deze kwetsbaarheden, wat de integriteit en privacy van gebruikers in gevaar bracht. De updates bevatten verbeterde validatiemechanismen en restricties om deze risico\u0027s te mitigeren.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "medium",
"title": "Schade"
},
{
"category": "general",
"text": "UNIX Symbolic Link (Symlink) Following",
"title": "CWE-61"
},
{
"category": "general",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "CWE-275",
"title": "CWE-275"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "CWE-371",
"title": "CWE-371"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://support.apple.com/en-us/125632"
}
],
"title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
"tracking": {
"current_release_date": "2025-11-04T12:53:15.358078Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2025-0352",
"initial_release_date": "2025-11-04T12:53:15.358078Z",
"revision_history": [
{
"date": "2025-11-04T12:53:15.358078Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "iOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "iPadOS"
}
],
"category": "vendor",
"name": "Apple"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-43442",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 addressed a permissions issue that allowed apps to identify other installed apps by implementing additional restrictions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43442 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43442.json"
}
],
"title": "CVE-2025-43442"
},
{
"cve": "CVE-2025-43455",
"notes": [
{
"category": "description",
"text": "Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved a privacy vulnerability that could allow malicious apps to capture sensitive information via screenshots through enhanced checks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43455 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43455.json"
}
],
"title": "CVE-2025-43455"
},
{
"cve": "CVE-2025-43447",
"notes": [
{
"category": "description",
"text": "The recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved issues related to unexpected system termination and kernel memory corruption through enhanced memory handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43447 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43447.json"
}
],
"title": "CVE-2025-43447"
},
{
"cve": "CVE-2025-43462",
"notes": [
{
"category": "description",
"text": "The recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1 have resolved issues related to unexpected system termination and kernel memory corruption through enhanced memory handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43462 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43462.json"
}
],
"title": "CVE-2025-43462"
},
{
"cve": "CVE-2025-43449",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 have resolved the issue of malicious apps tracking users between installs through enhanced cache handling mechanisms.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43449 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43449.json"
}
],
"title": "CVE-2025-43449"
},
{
"cve": "CVE-2025-43379",
"notes": [
{
"category": "description",
"text": "Recent updates in visionOS 26.1 and various macOS, watchOS, iOS, iPadOS, and tvOS versions have enhanced symlink validation to prevent unauthorized access to protected user data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43379 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43379.json"
}
],
"title": "CVE-2025-43379"
},
{
"cve": "CVE-2025-43407",
"notes": [
{
"category": "description",
"text": "Recent updates to visionOS 26.1 and various macOS, iOS, and tvOS versions have resolved the issue of apps potentially breaking out of their sandbox through improved entitlements.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43407 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43407.json"
}
],
"title": "CVE-2025-43407"
},
{
"cve": "CVE-2025-43423",
"notes": [
{
"category": "description",
"text": "iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, and visionOS 26.1 have resolved a logging issue that exposed sensitive user information through enhanced data redaction.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43423 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43423.json"
}
],
"title": "CVE-2025-43423"
},
{
"cve": "CVE-2025-43450",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 addressed a logic issue that previously allowed apps to access camera views before permission was granted, enhancing security checks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43450 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43450.json"
}
],
"title": "CVE-2025-43450"
},
{
"cve": "CVE-2025-43448",
"notes": [
{
"category": "description",
"text": "Recent updates in visionOS 26.1 and macOS Sonoma 14.8.2 have resolved symlink vulnerabilities through enhanced validation, preventing potential sandbox breaches by applications.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43448 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43448.json"
}
],
"title": "CVE-2025-43448"
},
{
"cve": "CVE-2025-43426",
"notes": [
{
"category": "description",
"text": "A logging issue affecting sensitive user data was resolved in iOS 26.1 and iPadOS 26.1 through enhanced data redaction measures.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43426 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43426.json"
}
],
"title": "CVE-2025-43426"
},
{
"cve": "CVE-2025-43350",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 have resolved a permissions issue that previously allowed unauthorized access to restricted content from the lock screen through enhanced restrictions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43350 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43350.json"
}
],
"title": "CVE-2025-43350"
},
{
"cve": "CVE-2025-43436",
"notes": [
{
"category": "description",
"text": "A permissions issue allowing app enumeration of installed applications has been resolved with enhanced restrictions in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43436 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43436.json"
}
],
"title": "CVE-2025-43436"
},
{
"cve": "CVE-2025-43445",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability was mitigated through enhanced input validation, impacting multiple operating systems and potentially causing application crashes or memory corruption when handling malicious media files.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43445 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43445.json"
}
],
"title": "CVE-2025-43445"
},
{
"cve": "CVE-2025-43498",
"notes": [
{
"category": "description",
"text": "An authorization issue concerning sensitive user data access has been resolved through enhanced state management in iOS 26.1 and macOS Sequoia 15.7.2.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43498 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43498.json"
}
],
"title": "CVE-2025-43498"
},
{
"cve": "CVE-2025-43507",
"notes": [
{
"category": "description",
"text": "A privacy issue related to user fingerprinting was resolved in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 by relocating sensitive data.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43507 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43507.json"
}
],
"title": "CVE-2025-43507"
},
{
"cve": "CVE-2025-43444",
"notes": [
{
"category": "description",
"text": "Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1 have resolved a permissions issue that could allow apps to fingerprint users through enhanced restrictions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43444 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43444.json"
}
],
"title": "CVE-2025-43444"
},
{
"cve": "CVE-2025-43398",
"notes": [
{
"category": "description",
"text": "Recent updates in visionOS 26.1 and macOS Sonoma 14.8.2 have resolved unexpected system termination issues caused by memory handling through improved memory management techniques.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43398 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43398.json"
}
],
"title": "CVE-2025-43398"
},
{
"cve": "CVE-2025-43413",
"notes": [
{
"category": "description",
"text": "An access issue related to sandbox restrictions has been resolved in visionOS 26.1 and macOS Sonoma 14.8.2, enabling sandboxed apps to observe system-wide network connections through additional restrictions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43413 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43413.json"
}
],
"title": "CVE-2025-43413"
},
{
"cve": "CVE-2025-43496",
"notes": [
{
"category": "description",
"text": "The issue of remote content loading despite the \u0027Load Remote Images\u0027 setting being off has been resolved in watchOS 26.1 and iOS 26.1 through the implementation of additional logic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43496 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43496.json"
}
],
"title": "CVE-2025-43496"
},
{
"cve": "CVE-2025-43294",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "The handling of environment variables issue, which posed a risk of unauthorized access to sensitive user data, has been resolved through enhanced validation in watchOS 26.1, iOS 26.1, iPadOS 26.1, and tvOS 26.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43294 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43294.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2025-43294"
},
{
"cve": "CVE-2025-43386",
"notes": [
{
"category": "description",
"text": "iOS 26.1 addressed an out-of-bounds access vulnerability that could lead to app crashes or memory corruption when handling malicious media files, with improved bounds checking implemented.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43386 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43386.json"
}
],
"title": "CVE-2025-43386"
},
{
"cve": "CVE-2025-43385",
"notes": [
{
"category": "description",
"text": "Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43385 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43385.json"
}
],
"title": "CVE-2025-43385"
},
{
"cve": "CVE-2025-43384",
"notes": [
{
"category": "description",
"text": "Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43384 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43384.json"
}
],
"title": "CVE-2025-43384"
},
{
"cve": "CVE-2025-43383",
"notes": [
{
"category": "description",
"text": "Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43383 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43383.json"
}
],
"title": "CVE-2025-43383"
},
{
"cve": "CVE-2025-43424",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 have resolved a potential process crash vulnerability caused by a malicious HID device through the implementation of improved bounds checks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43424 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43424.json"
}
],
"title": "CVE-2025-43424"
},
{
"cve": "CVE-2025-43389",
"notes": [
{
"category": "description",
"text": "A privacy vulnerability in iOS 26.1 and macOS Sequoia 15.7.2 was resolved by removing code that could have allowed unauthorized access to sensitive user data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43389 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43389.json"
}
],
"title": "CVE-2025-43389"
},
{
"cve": "CVE-2025-43439",
"notes": [
{
"category": "description",
"text": "Recent updates in iOS 26.1, iPadOS 26.1, and visionOS 26.1 addressed a privacy issue by eliminating sensitive data that could facilitate user fingerprinting.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43439 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43439.json"
}
],
"title": "CVE-2025-43439"
},
{
"cve": "CVE-2025-43391",
"notes": [
{
"category": "description",
"text": "iOS 26.1, iPadOS 26.1, macOS Sonoma 14.8.2, and macOS Sequoia 15.7.2 have resolved a privacy issue related to the handling of temporary files that could have allowed unauthorized access to sensitive user data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43391 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43391.json"
}
],
"title": "CVE-2025-43391"
},
{
"cve": "CVE-2025-43493",
"notes": [
{
"category": "description",
"text": "iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1 have resolved the address bar spoofing issue through enhanced verification measures.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43493 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43493.json"
}
],
"title": "CVE-2025-43493"
},
{
"cve": "CVE-2025-43503",
"notes": [
{
"category": "description",
"text": "An inconsistent user interface issue related to state management has been resolved across multiple operating systems, including watchOS, iOS, iPadOS, Safari, and visionOS, addressing potential spoofing risks from malicious websites.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43503 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43503.json"
}
],
"title": "CVE-2025-43503"
},
{
"cve": "CVE-2025-43502",
"notes": [
{
"category": "description",
"text": "Recent updates in iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1 addressed a privacy issue by removing sensitive data to prevent the bypassing of privacy preferences.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43502 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43502.json"
}
],
"title": "CVE-2025-43502"
},
{
"cve": "CVE-2025-43500",
"notes": [
{
"category": "description",
"text": "Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved a privacy issue regarding user preferences, enhancing the protection of sensitive user data from app access.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43500 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43500.json"
}
],
"title": "CVE-2025-43500"
},
{
"cve": "CVE-2025-43454",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 resolve device locking failures and improve bounds checks, enhancing overall system stability.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43454 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43454.json"
}
],
"title": "CVE-2025-43454"
},
{
"cve": "CVE-2025-43460",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 have addressed a logic issue that allowed physical access to a locked device, enabling the viewing of sensitive user information, through enhanced checks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43460 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43460.json"
}
],
"title": "CVE-2025-43460"
},
{
"cve": "CVE-2025-43422",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 have addressed a vulnerability in Stolen Device Protection that could be exploited by an attacker with physical access, through the implementation of additional logic.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43422 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43422.json"
}
],
"title": "CVE-2025-43422"
},
{
"cve": "CVE-2025-43452",
"notes": [
{
"category": "description",
"text": "iOS 26.1 and iPadOS 26.1 have resolved the issue of keyboard suggestions displaying sensitive information on the lock screen by implementing restrictions on options available on locked devices.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43452 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43452.json"
}
],
"title": "CVE-2025-43452"
},
{
"cve": "CVE-2025-43480",
"notes": [
{
"category": "description",
"text": "Apple has resolved a data exfiltration issue in Safari and iOS through enhanced checks to prevent potential threats from malicious websites.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43480 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43480.json"
}
],
"title": "CVE-2025-43480"
},
{
"cve": "CVE-2025-43458",
"notes": [
{
"category": "description",
"text": "Apple has resolved the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced state management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43458 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43458.json"
}
],
"title": "CVE-2025-43458"
},
{
"cve": "CVE-2025-43430",
"notes": [
{
"category": "description",
"text": "Apple has resolved the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced state management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43430 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43430.json"
}
],
"title": "CVE-2025-43430"
},
{
"cve": "CVE-2025-43427",
"notes": [
{
"category": "description",
"text": "iOS 26.1, iPadOS 26.1, tvOS 26.1, Safari 26.1, and visionOS 26.1 have resolved unexpected process crashes caused by malicious web content through enhanced state management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43427 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43427.json"
}
],
"title": "CVE-2025-43427"
},
{
"cve": "CVE-2025-43443",
"notes": [
{
"category": "description",
"text": "Safari 26.1 and various Apple operating systems have resolved unexpected process crashes caused by malicious web content through enhanced checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43443 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43443.json"
}
],
"title": "CVE-2025-43443"
},
{
"cve": "CVE-2025-43441",
"notes": [
{
"category": "description",
"text": "iOS 26.1, iPadOS 26.1, tvOS 26.1, Safari 26.1, and visionOS 26.1 have addressed unexpected process crashes caused by malicious web content through enhanced memory management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43441 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43441.json"
}
],
"title": "CVE-2025-43441"
},
{
"cve": "CVE-2025-43435",
"notes": [
{
"category": "description",
"text": "Apple has addressed the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced memory management techniques.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43435 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43435.json"
}
],
"title": "CVE-2025-43435"
},
{
"cve": "CVE-2025-43425",
"notes": [
{
"category": "description",
"text": "Apple has addressed the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced memory management techniques.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43425 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43425.json"
}
],
"title": "CVE-2025-43425"
},
{
"cve": "CVE-2025-43440",
"notes": [
{
"category": "description",
"text": "Safari 26.1 and various Apple operating systems have resolved unexpected process crashes caused by malicious web content through enhanced verification measures.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43440 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43440.json"
}
],
"title": "CVE-2025-43440"
},
{
"cve": "CVE-2025-43438",
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43438 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43438.json"
}
],
"title": "CVE-2025-43438"
},
{
"cve": "CVE-2025-43457",
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43457 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43457.json"
}
],
"title": "CVE-2025-43457"
},
{
"cve": "CVE-2025-43434",
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43434 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43434.json"
}
],
"title": "CVE-2025-43434"
},
{
"cve": "CVE-2025-43495",
"notes": [
{
"category": "description",
"text": "The issue of unauthorized keystroke monitoring has been addressed in iOS 26.1 and iPadOS 26.1 through the implementation of improved checks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43495 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43495.json"
}
],
"title": "CVE-2025-43495"
},
{
"cve": "CVE-2025-43433",
"notes": [
{
"category": "description",
"text": "Apple has addressed memory corruption vulnerabilities in Safari and iOS 26.1 through enhanced memory management techniques.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43433 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43433.json"
}
],
"title": "CVE-2025-43433"
},
{
"cve": "CVE-2025-43431",
"notes": [
{
"category": "description",
"text": "Apple has addressed memory corruption vulnerabilities in Safari and iOS 26.1 through enhanced memory management techniques.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43431 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43431.json"
}
],
"title": "CVE-2025-43431"
},
{
"cve": "CVE-2025-43432",
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability in various Apple operating systems was resolved through improved memory management, mitigating risks from potentially malicious web content.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43432 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43432.json"
}
],
"title": "CVE-2025-43432"
},
{
"cve": "CVE-2025-43429",
"notes": [
{
"category": "description",
"text": "A buffer overflow vulnerability was addressed in Safari and various Apple operating systems, including visionOS, watchOS, iOS, iPadOS, and tvOS versions 26.1, through enhanced bounds checking to prevent unexpected process crashes from malicious web content.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43429 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43429.json"
}
],
"title": "CVE-2025-43429"
},
{
"cve": "CVE-2025-43421",
"notes": [
{
"category": "description",
"text": "Disabling array allocation sinking has resolved vulnerabilities in iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1, preventing unexpected process crashes from malicious web content.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43421 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43421.json"
}
],
"title": "CVE-2025-43421"
},
{
"cve": "CVE-2025-43392",
"notes": [
{
"category": "description",
"text": "Safari 26.1 and related operating systems have resolved cross-origin image data exfiltration issues through improved cache handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-43392 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43392.json"
}
],
"title": "CVE-2025-43392"
}
]
}
OPENSUSE-SU-2026:20065-1
Vulnerability from csaf_opensuse - Published: 2026-01-20 12:08 - Updated: 2026-01-20 12:08Summary
Security update for webkit2gtk3
Severity
Important
Notes
Title of the patch: Security update for webkit2gtk3
Description of the patch: This update for webkit2gtk3 fixes the following issues:
Update to version 2.50.4.
Security issues fixed:
- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a
UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).
- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of
verification of the origins of drag operations (bsc#1254473).
- CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation
(bsc#1255497).
- CVE-2025-43272: processing maliciously crafted web content may lead to an unexpected process crash due to improper
memory handling (bsc#1250439).
- CVE-2025-43342: processing maliciously crafted web content may lead to an unexpected process crash due to a
correctness issue and missing checks (bsc#1250440).
- CVE-2025-43343: processing maliciously crafted web content may lead to an unexpected process crash due to improper
memory handling (bsc#1251975).
- CVE-2025-43356: a website may be able to access sensor information without user consent due to improper cache handling
(bsc#1250441).
- CVE-2025-43368: processing maliciously crafted web content may lead to an unexpected process crash due to a
use-after-free issue (bsc#1250442).
- CVE-2025-43392: websites may exfiltrate image data cross-origin due to issues with cache handling (bsc#1254165).
- CVE-2025-43419: processing maliciously crafted web content may lead to memory corruption due to improper memory
handling (bsc#1254166).
- CVE-2025-43421: processing maliciously crafted web content may lead to an unexpected process crash due to enabled
array allocation sinking (bsc#1254167).
- CVE-2025-43425: processing maliciously crafted web content may lead to an unexpected process crash due to improper
memory handling (bsc#1254168).
- CVE-2025-43427: processing maliciously crafted web content may lead to an unexpected process crash due to issues with
state management (bsc#1254169).
- CVE-2025-43429: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer
overflow issue (bsc#1254174).
- CVE-2025-43430: processing maliciously crafted web content may lead to an unexpected process crash due to issues with
state management (bsc#1254172).
- CVE-2025-43431: processing maliciously crafted web content may lead to memory corruption due to improper memory
handling (bsc#1254170).
- CVE-2025-43432: processing maliciously crafted web content may lead to an unexpected process crash due to a
use-after-free issue (bsc#1254171).
- CVE-2025-43434: processing maliciously crafted web content may lead to an unexpected process crash due to a
use-after-free issue (bsc#1254179).
- CVE-2025-43440: processing maliciously crafted web content may lead to an unexpected process crash due to missing
checks (bsc#1254177).
- CVE-2025-43443: processing maliciously crafted web content may lead to an unexpected process crash due to missing
checks (bsc#1254176).
- CVE-2025-43458: processing maliciously crafted web content may lead to an unexpected process crash due to issues with
state management (bsc#1254498).
- CVE-2025-43501: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer
overflow issue (bsc#1255194).
- CVE-2025-43529: processing maliciously crafted web content may lead to arbitrary code execution due to a
use-after-free issue (bsc#1255198).
- CVE-2025-43531: processing maliciously crafted web content may lead to an unexpected process crash due to a race
condition (bsc#1255183).
- CVE-2025-43535: processing maliciously crafted web content may lead to an unexpected process crash due to improper
memory handling (bsc#1255195).
- CVE-2025-43536: processing maliciously crafted web content may lead to an unexpected process crash due to a
use-after-free issue (bsc#1255200).
- CVE-2025-43541: processing maliciously crafted web content may lead to an unexpected process crash due to type
confusion (bsc#1255191).
- CVE-2025-66287: processing maliciously crafted web content may lead to an unexpected process crash due to improper
memory handling (bsc#1254509).
Other issues fixed and changes:
- Version 2.50.4:
* Correctly handle the program name passed to the sleep disabler.
* Ensure GStreamer is initialized before using the Quirks.
* Fix several crashes and rendering issues.
- Version 2.50.3:
* Fix seeking and looping of media elements that set the "loop" property.
* Fix several crashes and rendering issues.
- Version 2.50.2:
* Prevent unsafe URI schemes from participating in media playback.
* Make jsc_value_array_buffer_get_data() function introspectable.
* Fix logging in to Google accounts that have a WebAuthn second factor configured.
* Fix loading webkit://gpu when there are no threads configured for GPU rendering.
* Fix rendering gradiants that use the CSS hue interpolation method.
* Fix pasting image data from the clipboard.
* Fix font-family selection when the font name contains spaces.
* Fix the build with standard C libraries that lack execinfo.h, like Musl or uClibc.
* Fix capturing canvas snapshots in the Web Inspector.
* Fix several crashes and rendering issues.
- Version 2.50.1:
* Improve text rendering performance.
* Fix audio playback broken on instagram.
* Fix rendering of layers with fractional transforms.
* Fix the build with ENABLE(VIDEO) disabled.
* Fix the build in s390x.
* Fix several crashes and rendering issues.
- Version 2.50.0:
* Improved rendering performance by recording each layer once and replaying every dirty region in different worker
threads.
* Enable damage propagation to the UI process by default.
* CSS property font-variant-emoji is now enabled by default.
* Font synthesis properties (bold/italic) are now properly handled.
* Ensure web view is focused on tap gesture.
* Added new API to get the theme color of a WebKitWebView.
- Version 2.49.90:
* Add support for font collection / fragment identifiers.
* Fix web process deadlock on exit.
* Fix stuttering when playing WebP animations
* Fix CSS animations with cubic-bezier timing function.
* Do not start the MemoryPressureMonitor if it’s disabled
* Fix several crashes and rendering issues.
* Updated translations.
- Version 2.48.6:
* Fix emojis incorrectly rendered in their text variant.
* Add support for font collection / fragment identifiers.
* Fix web process deadlock on exit.
* Fix stuttering when playing WebP animations.
* Fix CSS animations with cubic-bezier timing function.
* Do not start the MemoryPressureMonitor if it's disabled.
* Fix several crashes and rendering issues.
- Fix a11y regression where AT-SPI roles were mapped incorrectly.
- Disable skia on ppc64le.
Patchnames: openSUSE-Leap-16.0-156
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.4 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.6 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
122 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for webkit2gtk3",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.50.4.\n\nSecurity issues fixed:\n\n- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a\n UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).\n- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of\n verification of the origins of drag operations (bsc#1254473).\n- CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation\n (bsc#1255497).\n- CVE-2025-43272: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n memory handling (bsc#1250439).\n- CVE-2025-43342: processing maliciously crafted web content may lead to an unexpected process crash due to a\n correctness issue and missing checks (bsc#1250440).\n- CVE-2025-43343: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n memory handling (bsc#1251975).\n- CVE-2025-43356: a website may be able to access sensor information without user consent due to improper cache handling\n (bsc#1250441).\n- CVE-2025-43368: processing maliciously crafted web content may lead to an unexpected process crash due to a\n use-after-free issue (bsc#1250442).\n- CVE-2025-43392: websites may exfiltrate image data cross-origin due to issues with cache handling (bsc#1254165).\n- CVE-2025-43419: processing maliciously crafted web content may lead to memory corruption due to improper memory\n handling (bsc#1254166).\n- CVE-2025-43421: processing maliciously crafted web content may lead to an unexpected process crash due to enabled\n array allocation sinking (bsc#1254167).\n- CVE-2025-43425: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n memory handling (bsc#1254168).\n- CVE-2025-43427: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n state management (bsc#1254169).\n- CVE-2025-43429: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n overflow issue (bsc#1254174).\n- CVE-2025-43430: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n state management (bsc#1254172).\n- CVE-2025-43431: processing maliciously crafted web content may lead to memory corruption due to improper memory\n handling (bsc#1254170).\n- CVE-2025-43432: processing maliciously crafted web content may lead to an unexpected process crash due to a\n use-after-free issue (bsc#1254171).\n- CVE-2025-43434: processing maliciously crafted web content may lead to an unexpected process crash due to a\n use-after-free issue (bsc#1254179).\n- CVE-2025-43440: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n checks (bsc#1254177).\n- CVE-2025-43443: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n checks (bsc#1254176).\n- CVE-2025-43458: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n state management (bsc#1254498).\n- CVE-2025-43501: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n overflow issue (bsc#1255194).\n- CVE-2025-43529: processing maliciously crafted web content may lead to arbitrary code execution due to a\n use-after-free issue (bsc#1255198).\n- CVE-2025-43531: processing maliciously crafted web content may lead to an unexpected process crash due to a race\n condition (bsc#1255183).\n- CVE-2025-43535: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n memory handling (bsc#1255195).\n- CVE-2025-43536: processing maliciously crafted web content may lead to an unexpected process crash due to a\n use-after-free issue (bsc#1255200).\n- CVE-2025-43541: processing maliciously crafted web content may lead to an unexpected process crash due to type\n confusion (bsc#1255191).\n- CVE-2025-66287: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n memory handling (bsc#1254509).\n\nOther issues fixed and changes:\n\n- Version 2.50.4:\n * Correctly handle the program name passed to the sleep disabler.\n * Ensure GStreamer is initialized before using the Quirks.\n * Fix several crashes and rendering issues.\n\n- Version 2.50.3:\n * Fix seeking and looping of media elements that set the \"loop\" property.\n * Fix several crashes and rendering issues.\n\n- Version 2.50.2:\n * Prevent unsafe URI schemes from participating in media playback.\n * Make jsc_value_array_buffer_get_data() function introspectable.\n * Fix logging in to Google accounts that have a WebAuthn second factor configured.\n * Fix loading webkit://gpu when there are no threads configured for GPU rendering.\n * Fix rendering gradiants that use the CSS hue interpolation method.\n * Fix pasting image data from the clipboard.\n * Fix font-family selection when the font name contains spaces.\n * Fix the build with standard C libraries that lack execinfo.h, like Musl or uClibc.\n * Fix capturing canvas snapshots in the Web Inspector.\n * Fix several crashes and rendering issues.\n\n- Version 2.50.1:\n * Improve text rendering performance.\n * Fix audio playback broken on instagram.\n * Fix rendering of layers with fractional transforms.\n * Fix the build with ENABLE(VIDEO) disabled.\n * Fix the build in s390x.\n * Fix several crashes and rendering issues.\n\n- Version 2.50.0:\n * Improved rendering performance by recording each layer once and replaying every dirty region in different worker\n threads.\n * Enable damage propagation to the UI process by default.\n * CSS property font-variant-emoji is now enabled by default.\n * Font synthesis properties (bold/italic) are now properly handled.\n * Ensure web view is focused on tap gesture.\n * Added new API to get the theme color of a WebKitWebView.\n\n- Version 2.49.90:\n * Add support for font collection / fragment identifiers.\n * Fix web process deadlock on exit.\n * Fix stuttering when playing WebP animations\n * Fix CSS animations with cubic-bezier timing function.\n * Do not start the MemoryPressureMonitor if it\u2019s disabled\n * Fix several crashes and rendering issues.\n * Updated translations.\n\n- Version 2.48.6:\n * Fix emojis incorrectly rendered in their text variant.\n * Add support for font collection / fragment identifiers.\n * Fix web process deadlock on exit.\n * Fix stuttering when playing WebP animations.\n * Fix CSS animations with cubic-bezier timing function.\n * Do not start the MemoryPressureMonitor if it\u0027s disabled.\n * Fix several crashes and rendering issues.\n\n- Fix a11y regression where AT-SPI roles were mapped incorrectly.\n- Disable skia on ppc64le.\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-156",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20065-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1250439",
"url": "https://bugzilla.suse.com/1250439"
},
{
"category": "self",
"summary": "SUSE Bug 1250440",
"url": "https://bugzilla.suse.com/1250440"
},
{
"category": "self",
"summary": "SUSE Bug 1250441",
"url": "https://bugzilla.suse.com/1250441"
},
{
"category": "self",
"summary": "SUSE Bug 1250442",
"url": "https://bugzilla.suse.com/1250442"
},
{
"category": "self",
"summary": "SUSE Bug 1251975",
"url": "https://bugzilla.suse.com/1251975"
},
{
"category": "self",
"summary": "SUSE Bug 1254164",
"url": "https://bugzilla.suse.com/1254164"
},
{
"category": "self",
"summary": "SUSE Bug 1254165",
"url": "https://bugzilla.suse.com/1254165"
},
{
"category": "self",
"summary": "SUSE Bug 1254166",
"url": "https://bugzilla.suse.com/1254166"
},
{
"category": "self",
"summary": "SUSE Bug 1254167",
"url": "https://bugzilla.suse.com/1254167"
},
{
"category": "self",
"summary": "SUSE Bug 1254168",
"url": "https://bugzilla.suse.com/1254168"
},
{
"category": "self",
"summary": "SUSE Bug 1254169",
"url": "https://bugzilla.suse.com/1254169"
},
{
"category": "self",
"summary": "SUSE Bug 1254170",
"url": "https://bugzilla.suse.com/1254170"
},
{
"category": "self",
"summary": "SUSE Bug 1254171",
"url": "https://bugzilla.suse.com/1254171"
},
{
"category": "self",
"summary": "SUSE Bug 1254172",
"url": "https://bugzilla.suse.com/1254172"
},
{
"category": "self",
"summary": "SUSE Bug 1254174",
"url": "https://bugzilla.suse.com/1254174"
},
{
"category": "self",
"summary": "SUSE Bug 1254175",
"url": "https://bugzilla.suse.com/1254175"
},
{
"category": "self",
"summary": "SUSE Bug 1254176",
"url": "https://bugzilla.suse.com/1254176"
},
{
"category": "self",
"summary": "SUSE Bug 1254177",
"url": "https://bugzilla.suse.com/1254177"
},
{
"category": "self",
"summary": "SUSE Bug 1254179",
"url": "https://bugzilla.suse.com/1254179"
},
{
"category": "self",
"summary": "SUSE Bug 1254208",
"url": "https://bugzilla.suse.com/1254208"
},
{
"category": "self",
"summary": "SUSE Bug 1254473",
"url": "https://bugzilla.suse.com/1254473"
},
{
"category": "self",
"summary": "SUSE Bug 1254498",
"url": "https://bugzilla.suse.com/1254498"
},
{
"category": "self",
"summary": "SUSE Bug 1254509",
"url": "https://bugzilla.suse.com/1254509"
},
{
"category": "self",
"summary": "SUSE Bug 1255183",
"url": "https://bugzilla.suse.com/1255183"
},
{
"category": "self",
"summary": "SUSE Bug 1255191",
"url": "https://bugzilla.suse.com/1255191"
},
{
"category": "self",
"summary": "SUSE Bug 1255194",
"url": "https://bugzilla.suse.com/1255194"
},
{
"category": "self",
"summary": "SUSE Bug 1255195",
"url": "https://bugzilla.suse.com/1255195"
},
{
"category": "self",
"summary": "SUSE Bug 1255198",
"url": "https://bugzilla.suse.com/1255198"
},
{
"category": "self",
"summary": "SUSE Bug 1255200",
"url": "https://bugzilla.suse.com/1255200"
},
{
"category": "self",
"summary": "SUSE Bug 1255497",
"url": "https://bugzilla.suse.com/1255497"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-43000 page",
"url": "https://www.suse.com/security/cve/CVE-2023-43000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-13502 page",
"url": "https://www.suse.com/security/cve/CVE-2025-13502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-13947 page",
"url": "https://www.suse.com/security/cve/CVE-2025-13947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-14174 page",
"url": "https://www.suse.com/security/cve/CVE-2025-14174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43272 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43272/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43342 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43342/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43343 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43343/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43356 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43368 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43368/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43392 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43419 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43421 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43421/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43425 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43425/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43427 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43429 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43430 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43431 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43431/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43432 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43432/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43434 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43434/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43440 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43443 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43443/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43458 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43458/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43480 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43501 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43529 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43531 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43535 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43536 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-43541 page",
"url": "https://www.suse.com/security/cve/CVE-2025-43541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-66287 page",
"url": "https://www.suse.com/security/cve/CVE-2025-66287/"
}
],
"title": "Security update for webkit2gtk3",
"tracking": {
"current_release_date": "2026-01-20T12:08:51Z",
"generator": {
"date": "2026-01-20T12:08:51Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:20065-1",
"initial_release_date": "2026-01-20T12:08:51Z",
"revision_history": [
{
"date": "2026-01-20T12:08:51Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"product": {
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"product_id": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"product_id": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"product": {
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"product_id": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"product": {
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"product_id": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"product_id": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"product": {
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"product_id": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"product_id": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"product_id": "webkit-jsc-4-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"product_id": "webkit-jsc-4.1-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"product_id": "webkit-jsc-6.0-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"product_id": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"product_id": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"product_id": "webkit2gtk3-devel-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"product_id": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"product_id": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"product_id": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"product_id": "webkit2gtk4-devel-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"product_id": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"product": {
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"product_id": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"product": {
"name": "WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"product_id": "WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch"
}
},
{
"category": "product_version",
"name": "WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"product": {
"name": "WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"product_id": "WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch"
}
},
{
"category": "product_version",
"name": "WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"product": {
"name": "WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"product_id": "WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"product_id": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"product_id": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"product_id": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"product_id": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"product_id": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"product_id": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"product_id": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit-jsc-4-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"product_id": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"product": {
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"product_id": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"product": {
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"product_id": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"product": {
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"product_id": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"product": {
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"product_id": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"product": {
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"product_id": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"product": {
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"product_id": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"product": {
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"product_id": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"product": {
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"product_id": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit-jsc-4-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit-jsc-4-2.50.4-160000.1.1.s390x",
"product_id": "webkit-jsc-4-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"product_id": "webkit-jsc-4.1-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"product_id": "webkit-jsc-6.0-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"product_id": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"product_id": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"product_id": "webkit2gtk3-devel-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"product_id": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"product_id": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"product_id": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"product_id": "webkit2gtk4-devel-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"product_id": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"product": {
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"product_id": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"product": {
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"product_id": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"product_id": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"product": {
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"product_id": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"product": {
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"product_id": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"product_id": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"product": {
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"product_id": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"product_id": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"product_id": "webkit-jsc-4-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"product_id": "webkit-jsc-4.1-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"product_id": "webkit-jsc-6.0-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"product_id": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"product_id": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"product_id": "webkit2gtk3-devel-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"product_id": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"product_id": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"product_id": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"product_id": "webkit2gtk4-devel-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"product_id": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"product": {
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"product_id": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch"
},
"product_reference": "WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch"
},
"product_reference": "WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch"
},
"product_reference": "WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64"
},
"product_reference": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x"
},
"product_reference": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64"
},
"product_reference": "libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x"
},
"product_reference": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64"
},
"product_reference": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x"
},
"product_reference": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64"
},
"product_reference": "libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64"
},
"product_reference": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x"
},
"product_reference": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64"
},
"product_reference": "libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x"
},
"product_reference": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64"
},
"product_reference": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x"
},
"product_reference": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64"
},
"product_reference": "libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x"
},
"product_reference": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-4-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-4-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-4-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit-jsc-4-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-4-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-4.1-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit-jsc-6.0-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk4-devel-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64"
},
"product_reference": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le"
},
"product_reference": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x"
},
"product_reference": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
},
"product_reference": "webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-43000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-43000"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-43000",
"url": "https://www.suse.com/security/cve/CVE-2023-43000"
},
{
"category": "external",
"summary": "SUSE Bug 1254164 for CVE-2023-43000",
"url": "https://bugzilla.suse.com/1254164"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2023-43000"
},
{
"cve": "CVE-2025-13502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-13502"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-13502",
"url": "https://www.suse.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "SUSE Bug 1254208 for CVE-2025-13502",
"url": "https://bugzilla.suse.com/1254208"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-13502"
},
{
"cve": "CVE-2025-13947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-13947"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-13947",
"url": "https://www.suse.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "SUSE Bug 1254473 for CVE-2025-13947",
"url": "https://bugzilla.suse.com/1254473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-13947"
},
{
"cve": "CVE-2025-14174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-14174"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-14174",
"url": "https://www.suse.com/security/cve/CVE-2025-14174"
},
{
"category": "external",
"summary": "SUSE Bug 1254776 for CVE-2025-14174",
"url": "https://bugzilla.suse.com/1254776"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-14174"
},
{
"cve": "CVE-2025-43272",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43272"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 26, Safari 26, iOS 26 and iPadOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43272",
"url": "https://www.suse.com/security/cve/CVE-2025-43272"
},
{
"category": "external",
"summary": "SUSE Bug 1250439 for CVE-2025-43272",
"url": "https://bugzilla.suse.com/1250439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43272"
},
{
"cve": "CVE-2025-43342",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43342"
}
],
"notes": [
{
"category": "general",
"text": "A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43342",
"url": "https://www.suse.com/security/cve/CVE-2025-43342"
},
{
"category": "external",
"summary": "SUSE Bug 1250440 for CVE-2025-43342",
"url": "https://bugzilla.suse.com/1250440"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-43342"
},
{
"cve": "CVE-2025-43343",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43343"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43343",
"url": "https://www.suse.com/security/cve/CVE-2025-43343"
},
{
"category": "external",
"summary": "SUSE Bug 1251975 for CVE-2025-43343",
"url": "https://bugzilla.suse.com/1251975"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-43343"
},
{
"cve": "CVE-2025-43356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43356"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. A website may be able to access sensor information without user consent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43356",
"url": "https://www.suse.com/security/cve/CVE-2025-43356"
},
{
"category": "external",
"summary": "SUSE Bug 1250441 for CVE-2025-43356",
"url": "https://bugzilla.suse.com/1250441"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43356"
},
{
"cve": "CVE-2025-43368",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43368"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43368",
"url": "https://www.suse.com/security/cve/CVE-2025-43368"
},
{
"category": "external",
"summary": "SUSE Bug 1250442 for CVE-2025-43368",
"url": "https://bugzilla.suse.com/1250442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43368"
},
{
"cve": "CVE-2025-43392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43392"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved handling of caches. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. A website may exfiltrate image data cross-origin.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43392",
"url": "https://www.suse.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "SUSE Bug 1254165 for CVE-2025-43392",
"url": "https://bugzilla.suse.com/1254165"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43392"
},
{
"cve": "CVE-2025-43419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43419"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43419",
"url": "https://www.suse.com/security/cve/CVE-2025-43419"
},
{
"category": "external",
"summary": "SUSE Bug 1254166 for CVE-2025-43419",
"url": "https://bugzilla.suse.com/1254166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-43419"
},
{
"cve": "CVE-2025-43421",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43421"
}
],
"notes": [
{
"category": "general",
"text": "Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, Safari 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43421",
"url": "https://www.suse.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "SUSE Bug 1254167 for CVE-2025-43421",
"url": "https://bugzilla.suse.com/1254167"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43421"
},
{
"cve": "CVE-2025-43425",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43425"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43425",
"url": "https://www.suse.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "SUSE Bug 1254168 for CVE-2025-43425",
"url": "https://bugzilla.suse.com/1254168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43425"
},
{
"cve": "CVE-2025-43427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43427"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in tvOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43427",
"url": "https://www.suse.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "SUSE Bug 1254169 for CVE-2025-43427",
"url": "https://bugzilla.suse.com/1254169"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43427"
},
{
"cve": "CVE-2025-43429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43429"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43429",
"url": "https://www.suse.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "SUSE Bug 1254174 for CVE-2025-43429",
"url": "https://bugzilla.suse.com/1254174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43429"
},
{
"cve": "CVE-2025-43430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43430"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43430",
"url": "https://www.suse.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "SUSE Bug 1254172 for CVE-2025-43430",
"url": "https://bugzilla.suse.com/1254172"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43430"
},
{
"cve": "CVE-2025-43431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43431"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43431",
"url": "https://www.suse.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "SUSE Bug 1254170 for CVE-2025-43431",
"url": "https://bugzilla.suse.com/1254170"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-43431"
},
{
"cve": "CVE-2025-43432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43432"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43432",
"url": "https://www.suse.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "SUSE Bug 1254171 for CVE-2025-43432",
"url": "https://bugzilla.suse.com/1254171"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43432"
},
{
"cve": "CVE-2025-43434",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43434"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43434",
"url": "https://www.suse.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "SUSE Bug 1254179 for CVE-2025-43434",
"url": "https://bugzilla.suse.com/1254179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43434"
},
{
"cve": "CVE-2025-43440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43440"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed with improved checks This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43440",
"url": "https://www.suse.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "SUSE Bug 1254177 for CVE-2025-43440",
"url": "https://bugzilla.suse.com/1254177"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43440"
},
{
"cve": "CVE-2025-43443",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43443"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed with improved checks. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43443",
"url": "https://www.suse.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "SUSE Bug 1254176 for CVE-2025-43443",
"url": "https://bugzilla.suse.com/1254176"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43443"
},
{
"cve": "CVE-2025-43458",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43458"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43458",
"url": "https://www.suse.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "SUSE Bug 1254498 for CVE-2025-43458",
"url": "https://bugzilla.suse.com/1254498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43458"
},
{
"cve": "CVE-2025-43480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43480"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved checks. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. A malicious website may exfiltrate data cross-origin.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43480",
"url": "https://www.suse.com/security/cve/CVE-2025-43480"
},
{
"category": "external",
"summary": "SUSE Bug 1254175 for CVE-2025-43480",
"url": "https://bugzilla.suse.com/1254175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43480"
},
{
"cve": "CVE-2025-43501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43501"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43501",
"url": "https://www.suse.com/security/cve/CVE-2025-43501"
},
{
"category": "external",
"summary": "SUSE Bug 1255194 for CVE-2025-43501",
"url": "https://bugzilla.suse.com/1255194"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43501"
},
{
"cve": "CVE-2025-43529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43529"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43529",
"url": "https://www.suse.com/security/cve/CVE-2025-43529"
},
{
"category": "external",
"summary": "SUSE Bug 1255198 for CVE-2025-43529",
"url": "https://bugzilla.suse.com/1255198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-43529"
},
{
"cve": "CVE-2025-43531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43531"
}
],
"notes": [
{
"category": "general",
"text": "A race condition was addressed with improved state handling. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43531",
"url": "https://www.suse.com/security/cve/CVE-2025-43531"
},
{
"category": "external",
"summary": "SUSE Bug 1255183 for CVE-2025-43531",
"url": "https://bugzilla.suse.com/1255183"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43531"
},
{
"cve": "CVE-2025-43535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43535"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43535",
"url": "https://www.suse.com/security/cve/CVE-2025-43535"
},
{
"category": "external",
"summary": "SUSE Bug 1255195 for CVE-2025-43535",
"url": "https://bugzilla.suse.com/1255195"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43535"
},
{
"cve": "CVE-2025-43536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43536"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43536",
"url": "https://www.suse.com/security/cve/CVE-2025-43536"
},
{
"category": "external",
"summary": "SUSE Bug 1255200 for CVE-2025-43536",
"url": "https://bugzilla.suse.com/1255200"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43536"
},
{
"cve": "CVE-2025-43541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-43541"
}
],
"notes": [
{
"category": "general",
"text": "A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-43541",
"url": "https://www.suse.com/security/cve/CVE-2025-43541"
},
{
"category": "external",
"summary": "SUSE Bug 1255191 for CVE-2025-43541",
"url": "https://bugzilla.suse.com/1255191"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "moderate"
}
],
"title": "CVE-2025-43541"
},
{
"cve": "CVE-2025-66287",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-66287"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-66287",
"url": "https://www.suse.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "SUSE Bug 1254509 for CVE-2025-66287",
"url": "https://bugzilla.suse.com/1254509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:WebKitGTK-4.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-4.1-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:WebKitGTK-6.0-lang-2.50.4-160000.1.1.noarch",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_0-18-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libjavascriptcoregtk-6_0-1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_0-37-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkit2gtk-4_1-0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libwebkitgtk-6_0-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-JavaScriptCore-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKit2WebExtension-4_1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:typelib-1_0-WebKitWebProcessExtension-6_0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-4.1-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit-jsc-6.0-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_0-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk-4_1-injected-bundles-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk3-soup2-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-devel-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkit2gtk4-minibrowser-2.50.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.s390x",
"openSUSE Leap 16.0:webkitgtk-6_0-injected-bundles-2.50.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-01-20T12:08:51Z",
"details": "important"
}
],
"title": "CVE-2025-66287"
}
]
}
RHSA-2025:22789
Vulnerability from csaf_redhat - Published: 2025-12-08 01:55 - Updated: 2026-04-20 13:59Summary
Red Hat Security Advisory: webkit2gtk3 security update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
7.4 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.
6.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
95 references
Acknowledgments
Stanislav Fort
Aisle Research
Janet Black
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:22789",
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22789.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-20T13:59:35+00:00",
"generator": {
"date": "2026-04-20T13:59:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:22789",
"initial_release_date": "2025-12-08T01:55:51+00:00",
"revision_history": [
{
"date": "2025-12-08T01:55:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-11T13:16:30+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-20T13:59:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el8_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el8_10.src",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.src",
"product_id": "webkit2gtk3-0:2.50.3-1.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el8_10.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fort",
"Aisle Research"
]
}
],
"cve": "CVE-2025-13502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-21T07:47:33.751000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "RHBZ#2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=302218",
"url": "https://bugs.webkit.org/show_bug.cgi?id=302218"
}
],
"release_date": "2025-11-25T07:59:40.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"Janet Black"
]
}
],
"cve": "CVE-2025-13947",
"discovery_date": "2025-12-03T08:57:27.767000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websites to extract arbitrary files from a user\u2019s system with minimal interaction. Although some user action is required, the action can be trivial and easily induced by a malicious page. The issue arises from missing validation that a dragged file originated from an external application, enabling unintended file system access. Successful exploitation can compromise confidentiality of local user data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "RHBZ#2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=271957",
"url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
}
],
"release_date": "2025-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop"
},
{
"cve": "CVE-2025-43392",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:39:51.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A website may exfiltrate image data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "RHBZ#2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A website may exfiltrate image data cross-origin"
},
{
"cve": "CVE-2025-43421",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T15:57:10.661000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "RHBZ#2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43425",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:42:33.890000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "RHBZ#2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43427",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:43:48.629000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416329"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "RHBZ#2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43427"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43429",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:44:50.827000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "RHBZ#2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43430",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:45:54.422000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416331"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "RHBZ#2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43430"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43431",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:47:02.159000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "RHBZ#2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43432",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:47:57.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "RHBZ#2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43433",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:10:29.110000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43433"
},
{
"category": "external",
"summary": "RHBZ#2448783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:49:09.733000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "RHBZ#2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43434"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43438",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-03-18T20:11:28.807000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43438"
},
{
"category": "external",
"summary": "RHBZ#2448784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43440",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:50:27.289000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "RHBZ#2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43440"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43441",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:12:39.416000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43441"
},
{
"category": "external",
"summary": "RHBZ#2448785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43443",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:51:26.005000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "RHBZ#2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43443"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43458",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-12-04T16:02:08.461000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418855"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "RHBZ#2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-66287",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-12-04T16:04:58.978000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "RHBZ#2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:55:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22789"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
RHSA-2025:22790
Vulnerability from csaf_redhat - Published: 2025-12-08 01:59 - Updated: 2026-04-20 13:59Summary
Red Hat Security Advisory: webkit2gtk3 security update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
7.4 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.
6.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
95 references
Acknowledgments
Stanislav Fort
Aisle Research
Janet Black
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:22790",
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22790.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-20T13:59:35+00:00",
"generator": {
"date": "2026-04-20T13:59:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:22790",
"initial_release_date": "2025-12-08T01:59:46+00:00",
"revision_history": [
{
"date": "2025-12-08T01:59:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-11T14:32:30+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-20T13:59:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_7.src",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.src",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_7?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_7.src",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fort",
"Aisle Research"
]
}
],
"cve": "CVE-2025-13502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-21T07:47:33.751000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "RHBZ#2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=302218",
"url": "https://bugs.webkit.org/show_bug.cgi?id=302218"
}
],
"release_date": "2025-11-25T07:59:40.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"Janet Black"
]
}
],
"cve": "CVE-2025-13947",
"discovery_date": "2025-12-03T08:57:27.767000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websites to extract arbitrary files from a user\u2019s system with minimal interaction. Although some user action is required, the action can be trivial and easily induced by a malicious page. The issue arises from missing validation that a dragged file originated from an external application, enabling unintended file system access. Successful exploitation can compromise confidentiality of local user data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "RHBZ#2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=271957",
"url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
}
],
"release_date": "2025-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop"
},
{
"cve": "CVE-2025-43392",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:39:51.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A website may exfiltrate image data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "RHBZ#2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A website may exfiltrate image data cross-origin"
},
{
"cve": "CVE-2025-43421",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T15:57:10.661000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "RHBZ#2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43425",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:42:33.890000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "RHBZ#2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43427",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:43:48.629000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416329"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "RHBZ#2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43427"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43429",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:44:50.827000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "RHBZ#2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43430",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:45:54.422000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416331"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "RHBZ#2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43430"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43431",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:47:02.159000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "RHBZ#2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43432",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:47:57.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "RHBZ#2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43433",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:10:29.110000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43433"
},
{
"category": "external",
"summary": "RHBZ#2448783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:49:09.733000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "RHBZ#2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43434"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43438",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-03-18T20:11:28.807000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43438"
},
{
"category": "external",
"summary": "RHBZ#2448784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43440",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:50:27.289000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "RHBZ#2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43440"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43441",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:12:39.416000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43441"
},
{
"category": "external",
"summary": "RHBZ#2448785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43443",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:51:26.005000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "RHBZ#2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43443"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43458",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-12-04T16:02:08.461000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418855"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "RHBZ#2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-66287",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-12-04T16:04:58.978000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "RHBZ#2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-08T01:59:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.src",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-debugsource-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.i686",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
RHSA-2025:23110
Vulnerability from csaf_redhat - Published: 2025-12-11 11:41 - Updated: 2026-04-20 13:59Summary
Red Hat Security Advisory: webkit2gtk3 security update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
7.4 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.
6.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
95 references
Acknowledgments
Stanislav Fort
Aisle Research
Janet Black
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23110",
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23110.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-20T13:59:35+00:00",
"generator": {
"date": "2026-04-20T13:59:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:23110",
"initial_release_date": "2025-12-11T11:41:11+00:00",
"revision_history": [
{
"date": "2025-12-11T11:41:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-11T11:41:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-20T13:59:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_6.src",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.src",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fort",
"Aisle Research"
]
}
],
"cve": "CVE-2025-13502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-21T07:47:33.751000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "RHBZ#2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=302218",
"url": "https://bugs.webkit.org/show_bug.cgi?id=302218"
}
],
"release_date": "2025-11-25T07:59:40.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"Janet Black"
]
}
],
"cve": "CVE-2025-13947",
"discovery_date": "2025-12-03T08:57:27.767000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websites to extract arbitrary files from a user\u2019s system with minimal interaction. Although some user action is required, the action can be trivial and easily induced by a malicious page. The issue arises from missing validation that a dragged file originated from an external application, enabling unintended file system access. Successful exploitation can compromise confidentiality of local user data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "RHBZ#2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=271957",
"url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
}
],
"release_date": "2025-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop"
},
{
"cve": "CVE-2025-43392",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:39:51.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A website may exfiltrate image data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "RHBZ#2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A website may exfiltrate image data cross-origin"
},
{
"cve": "CVE-2025-43421",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T15:57:10.661000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "RHBZ#2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43425",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:42:33.890000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "RHBZ#2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43427",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:43:48.629000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416329"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "RHBZ#2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43427"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43429",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:44:50.827000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "RHBZ#2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43430",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:45:54.422000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416331"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "RHBZ#2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43430"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43431",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:47:02.159000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "RHBZ#2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43432",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:47:57.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "RHBZ#2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43433",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:10:29.110000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43433"
},
{
"category": "external",
"summary": "RHBZ#2448783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:49:09.733000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "RHBZ#2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43434"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43438",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-03-18T20:11:28.807000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43438"
},
{
"category": "external",
"summary": "RHBZ#2448784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43440",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:50:27.289000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "RHBZ#2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43440"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43441",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:12:39.416000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43441"
},
{
"category": "external",
"summary": "RHBZ#2448785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43443",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:51:26.005000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "RHBZ#2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43443"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43458",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-12-04T16:02:08.461000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418855"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "RHBZ#2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-66287",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-12-04T16:04:58.978000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "RHBZ#2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-11T11:41:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
RHSA-2025:23433
Vulnerability from csaf_redhat - Published: 2025-12-17 04:58 - Updated: 2026-04-20 13:59Summary
Red Hat Security Advisory: webkit2gtk3 security update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
7.5 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
7.4 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.
6.5 (Medium)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
95 references
Acknowledgments
Stanislav Fort
Aisle Research
Janet Black
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23433",
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23433.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-20T13:59:40+00:00",
"generator": {
"date": "2026-04-20T13:59:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:23433",
"initial_release_date": "2025-12-17T04:58:31+00:00",
"revision_history": [
{
"date": "2025-12-17T04:58:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-17T04:58:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-20T13:59:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_aus:8.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-2.el8_2.src",
"product": {
"name": "webkit2gtk3-0:2.50.3-2.el8_2.src",
"product_id": "webkit2gtk3-0:2.50.3-2.el8_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-2.el8_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-2.el8_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-2.el8_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-2.el8_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-2.el8_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-2.el8_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-2.el8_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-2.el8_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-2.el8_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-2.el8_2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-2.el8_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-2.el8_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-2.el8_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-2.el8_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-2.el8_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-2.el8_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-2.el8_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-2.el8_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-2.el8_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_2.src",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"product_id": "AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.Z.AUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fort",
"Aisle Research"
]
}
],
"cve": "CVE-2025-13502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-21T07:47:33.751000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "RHBZ#2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=302218",
"url": "https://bugs.webkit.org/show_bug.cgi?id=302218"
}
],
"release_date": "2025-11-25T07:59:40.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"Janet Black"
]
}
],
"cve": "CVE-2025-13947",
"discovery_date": "2025-12-03T08:57:27.767000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websites to extract arbitrary files from a user\u2019s system with minimal interaction. Although some user action is required, the action can be trivial and easily induced by a malicious page. The issue arises from missing validation that a dragged file originated from an external application, enabling unintended file system access. Successful exploitation can compromise confidentiality of local user data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "RHBZ#2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=271957",
"url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
}
],
"release_date": "2025-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop"
},
{
"cve": "CVE-2025-43392",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:39:51.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A website may exfiltrate image data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "RHBZ#2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A website may exfiltrate image data cross-origin"
},
{
"cve": "CVE-2025-43421",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T15:57:10.661000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "RHBZ#2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43425",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:42:33.890000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "RHBZ#2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43427",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:43:48.629000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416329"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "RHBZ#2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43427"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43429",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:44:50.827000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "RHBZ#2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43430",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:45:54.422000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416331"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "RHBZ#2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43430"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43431",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:47:02.159000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "RHBZ#2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43432",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:47:57.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "RHBZ#2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43433",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:10:29.110000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43433"
},
{
"category": "external",
"summary": "RHBZ#2448783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:49:09.733000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "RHBZ#2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43434"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43438",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-03-18T20:11:28.807000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43438"
},
{
"category": "external",
"summary": "RHBZ#2448784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43440",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:50:27.289000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "RHBZ#2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43440"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43441",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:12:39.416000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43441"
},
{
"category": "external",
"summary": "RHBZ#2448785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43443",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:51:26.005000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "RHBZ#2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43443"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43458",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-12-04T16:02:08.461000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418855"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "RHBZ#2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-66287",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-12-04T16:04:58.978000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "RHBZ#2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T04:58:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23433"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.src",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_2.x86_64",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.i686",
"AppStream-8.2.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
RHSA-2025:23434
Vulnerability from csaf_redhat - Published: 2025-12-17 06:13 - Updated: 2026-04-20 13:59Summary
Red Hat Security Advisory: webkit2gtk3 security update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
7.5 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
7.4 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.
6.5 (Medium)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
95 references
Acknowledgments
Stanislav Fort
Aisle Research
Janet Black
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23434",
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23434.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-20T13:59:35+00:00",
"generator": {
"date": "2026-04-20T13:59:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:23434",
"initial_release_date": "2025-12-17T06:13:37+00:00",
"revision_history": [
{
"date": "2025-12-17T06:13:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-17T06:13:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-20T13:59:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_aus:8.4::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-2.el8_4.src",
"product": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.src",
"product_id": "webkit2gtk3-0:2.50.3-2.el8_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-2.el8_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-2.el8_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-2.el8_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-2.el8_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-2.el8_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-2.el8_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-2.el8_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-2.el8_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-2.el8_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-2.el8_4?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-2.el8_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-2.el8_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-2.el8_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-2.el8_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-2.el8_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-2.el8_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-2.el8_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-2.el8_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-2.el8_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_4.src",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_4.src",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fort",
"Aisle Research"
]
}
],
"cve": "CVE-2025-13502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-21T07:47:33.751000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "RHBZ#2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=302218",
"url": "https://bugs.webkit.org/show_bug.cgi?id=302218"
}
],
"release_date": "2025-11-25T07:59:40.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"Janet Black"
]
}
],
"cve": "CVE-2025-13947",
"discovery_date": "2025-12-03T08:57:27.767000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websites to extract arbitrary files from a user\u2019s system with minimal interaction. Although some user action is required, the action can be trivial and easily induced by a malicious page. The issue arises from missing validation that a dragged file originated from an external application, enabling unintended file system access. Successful exploitation can compromise confidentiality of local user data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "RHBZ#2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=271957",
"url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
}
],
"release_date": "2025-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop"
},
{
"cve": "CVE-2025-43392",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:39:51.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A website may exfiltrate image data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "RHBZ#2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A website may exfiltrate image data cross-origin"
},
{
"cve": "CVE-2025-43421",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T15:57:10.661000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "RHBZ#2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43425",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:42:33.890000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "RHBZ#2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43427",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:43:48.629000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416329"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "RHBZ#2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43427"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43429",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:44:50.827000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "RHBZ#2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43430",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:45:54.422000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416331"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "RHBZ#2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43430"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43431",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:47:02.159000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "RHBZ#2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43432",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:47:57.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "RHBZ#2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43433",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:10:29.110000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43433"
},
{
"category": "external",
"summary": "RHBZ#2448783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:49:09.733000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "RHBZ#2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43434"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43438",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-03-18T20:11:28.807000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43438"
},
{
"category": "external",
"summary": "RHBZ#2448784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43440",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:50:27.289000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "RHBZ#2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43440"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43441",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:12:39.416000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43441"
},
{
"category": "external",
"summary": "RHBZ#2448785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43443",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:51:26.005000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "RHBZ#2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43443"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43458",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-12-04T16:02:08.461000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418855"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "RHBZ#2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-66287",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-12-04T16:04:58.978000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "RHBZ#2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T06:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23434"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.src",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.50.3-2.el8_4.x86_64",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.i686",
"AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-2.el8_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
RHSA-2025:23451
Vulnerability from csaf_redhat - Published: 2025-12-17 12:19 - Updated: 2026-04-20 13:59Summary
Red Hat Security Advisory: webkit2gtk3 security update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
7.4 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.
6.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
95 references
Acknowledgments
Stanislav Fort
Aisle Research
Janet Black
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23451",
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23451.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-20T13:59:41+00:00",
"generator": {
"date": "2026-04-20T13:59:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:23451",
"initial_release_date": "2025-12-17T12:19:18+00:00",
"revision_history": [
{
"date": "2025-12-17T12:19:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-17T12:19:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-20T13:59:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_2.src",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.src",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_2.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fort",
"Aisle Research"
]
}
],
"cve": "CVE-2025-13502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-21T07:47:33.751000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "RHBZ#2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=302218",
"url": "https://bugs.webkit.org/show_bug.cgi?id=302218"
}
],
"release_date": "2025-11-25T07:59:40.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"Janet Black"
]
}
],
"cve": "CVE-2025-13947",
"discovery_date": "2025-12-03T08:57:27.767000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websites to extract arbitrary files from a user\u2019s system with minimal interaction. Although some user action is required, the action can be trivial and easily induced by a malicious page. The issue arises from missing validation that a dragged file originated from an external application, enabling unintended file system access. Successful exploitation can compromise confidentiality of local user data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "RHBZ#2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=271957",
"url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
}
],
"release_date": "2025-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop"
},
{
"cve": "CVE-2025-43392",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:39:51.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A website may exfiltrate image data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "RHBZ#2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A website may exfiltrate image data cross-origin"
},
{
"cve": "CVE-2025-43421",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T15:57:10.661000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "RHBZ#2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43425",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:42:33.890000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "RHBZ#2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43427",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:43:48.629000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416329"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "RHBZ#2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43427"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43429",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:44:50.827000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "RHBZ#2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43430",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:45:54.422000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416331"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "RHBZ#2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43430"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43431",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:47:02.159000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "RHBZ#2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43432",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:47:57.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "RHBZ#2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43433",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:10:29.110000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43433"
},
{
"category": "external",
"summary": "RHBZ#2448783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:49:09.733000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "RHBZ#2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43434"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43438",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-03-18T20:11:28.807000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43438"
},
{
"category": "external",
"summary": "RHBZ#2448784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43440",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:50:27.289000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "RHBZ#2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43440"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43441",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:12:39.416000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43441"
},
{
"category": "external",
"summary": "RHBZ#2448785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43443",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:51:26.005000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "RHBZ#2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43443"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43458",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-12-04T16:02:08.461000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418855"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "RHBZ#2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-66287",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-12-04T16:04:58.978000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "RHBZ#2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T12:19:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23451"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.i686",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
RHSA-2025:23452
Vulnerability from csaf_redhat - Published: 2025-12-17 14:04 - Updated: 2026-04-20 13:59Summary
Red Hat Security Advisory: webkit2gtk3 security update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
7.4 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.
6.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
95 references
Acknowledgments
Stanislav Fort
Aisle Research
Janet Black
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23452",
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23452.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-20T13:59:37+00:00",
"generator": {
"date": "2026-04-20T13:59:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:23452",
"initial_release_date": "2025-12-17T14:04:17+00:00",
"revision_history": [
{
"date": "2025-12-17T14:04:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-17T14:04:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-20T13:59:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.0::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_0.src",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.src",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_0?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.50.3-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.3-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.3-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.3-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.3-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.3-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.3-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.3-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.3-1.el9_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_0.src",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fort",
"Aisle Research"
]
}
],
"cve": "CVE-2025-13502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-21T07:47:33.751000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "RHBZ#2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=302218",
"url": "https://bugs.webkit.org/show_bug.cgi?id=302218"
}
],
"release_date": "2025-11-25T07:59:40.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"Janet Black"
]
}
],
"cve": "CVE-2025-13947",
"discovery_date": "2025-12-03T08:57:27.767000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websites to extract arbitrary files from a user\u2019s system with minimal interaction. Although some user action is required, the action can be trivial and easily induced by a malicious page. The issue arises from missing validation that a dragged file originated from an external application, enabling unintended file system access. Successful exploitation can compromise confidentiality of local user data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "RHBZ#2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=271957",
"url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
}
],
"release_date": "2025-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop"
},
{
"cve": "CVE-2025-43392",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:39:51.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A website may exfiltrate image data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "RHBZ#2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A website may exfiltrate image data cross-origin"
},
{
"cve": "CVE-2025-43421",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T15:57:10.661000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "RHBZ#2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43425",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:42:33.890000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "RHBZ#2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43427",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:43:48.629000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416329"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "RHBZ#2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43427"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43429",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:44:50.827000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "RHBZ#2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43430",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:45:54.422000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416331"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "RHBZ#2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43430"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43431",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:47:02.159000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "RHBZ#2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43432",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:47:57.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "RHBZ#2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43433",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:10:29.110000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43433"
},
{
"category": "external",
"summary": "RHBZ#2448783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:49:09.733000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "RHBZ#2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43434"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43438",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-03-18T20:11:28.807000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43438"
},
{
"category": "external",
"summary": "RHBZ#2448784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43440",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:50:27.289000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "RHBZ#2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43440"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43441",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:12:39.416000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43441"
},
{
"category": "external",
"summary": "RHBZ#2448785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43443",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:51:26.005000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "RHBZ#2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43443"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43458",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-12-04T16:02:08.461000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418855"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "RHBZ#2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-66287",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-12-04T16:04:58.978000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "RHBZ#2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-17T14:04:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23452"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.3-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.3-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
RHSA-2025:23583
Vulnerability from csaf_redhat - Published: 2025-12-18 09:30 - Updated: 2026-04-20 13:59Summary
Red Hat Security Advisory: webkitgtk4 security update
Severity
Important
Notes
Topic: An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3.
Security Fix(es):
* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
7.5 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
7.4 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.
6.5 (Medium)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
8.8 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
95 references
Acknowledgments
Stanislav Fort
Aisle Research
Janet Black
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23583",
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23583.json"
}
],
"title": "Red Hat Security Advisory: webkitgtk4 security update",
"tracking": {
"current_release_date": "2026-04-20T13:59:37+00:00",
"generator": {
"date": "2026-04-20T13:59:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:23583",
"initial_release_date": "2025-12-18T09:30:34+00:00",
"revision_history": [
{
"date": "2025-12-18T09:30:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-18T09:30:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-20T13:59:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkitgtk4-0:2.50.3-2.el7_9.src",
"product": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.src",
"product_id": "webkitgtk4-0:2.50.3-2.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4@2.50.3-2.el7_9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"product": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"product_id": "webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4@2.50.3-2.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"product": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"product_id": "webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-devel@2.50.3-2.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"product": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"product_id": "webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-jsc@2.50.3-2.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"product": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"product_id": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-jsc-devel@2.50.3-2.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"product": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"product_id": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-debuginfo@2.50.3-2.el7_9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkitgtk4-0:2.50.3-2.el7_9.s390x",
"product": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.s390x",
"product_id": "webkitgtk4-0:2.50.3-2.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4@2.50.3-2.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"product": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"product_id": "webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-jsc@2.50.3-2.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"product": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"product_id": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-debuginfo@2.50.3-2.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"product": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"product_id": "webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-devel@2.50.3-2.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"product": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"product_id": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-jsc-devel@2.50.3-2.el7_9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"product": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"product_id": "webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4@2.50.3-2.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"product": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"product_id": "webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-devel@2.50.3-2.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"product": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"product_id": "webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-jsc@2.50.3-2.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"product": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"product_id": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-jsc-devel@2.50.3-2.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"product": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"product_id": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-debuginfo@2.50.3-2.el7_9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"product": {
"name": "webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"product_id": "webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkitgtk4-doc@2.50.3-2.el7_9?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src"
},
"product_reference": "webkitgtk4-0:2.50.3-2.el7_9.src",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-doc-0:2.50.3-2.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch"
},
"product_reference": "webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src"
},
"product_reference": "webkitgtk4-0:2.50.3-2.el7_9.src",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-doc-0:2.50.3-2.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch"
},
"product_reference": "webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le"
},
"product_reference": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x"
},
"product_reference": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
},
"product_reference": "webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fort",
"Aisle Research"
]
}
],
"cve": "CVE-2025-13502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-21T07:47:33.751000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"
},
{
"category": "external",
"summary": "RHBZ#2416300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13502"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=302218",
"url": "https://bugs.webkit.org/show_bug.cgi?id=302218"
}
],
"release_date": "2025-11-25T07:59:40.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"Janet Black"
]
}
],
"cve": "CVE-2025-13947",
"discovery_date": "2025-12-03T08:57:27.767000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websites to extract arbitrary files from a user\u2019s system with minimal interaction. Although some user action is required, the action can be trivial and easily induced by a malicious page. The issue arises from missing validation that a dragged file originated from an external application, enabling unintended file system access. Successful exploitation can compromise confidentiality of local user data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"
},
{
"category": "external",
"summary": "RHBZ#2418576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13947"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=271957",
"url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
}
],
"release_date": "2025-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop"
},
{
"cve": "CVE-2025-43392",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:39:51.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A website may exfiltrate image data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43392"
},
{
"category": "external",
"summary": "RHBZ#2416325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43392"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A website may exfiltrate image data cross-origin"
},
{
"cve": "CVE-2025-43421",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T15:57:10.661000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43421"
},
{
"category": "external",
"summary": "RHBZ#2416355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416355"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43421"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43425",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:42:33.890000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43425"
},
{
"category": "external",
"summary": "RHBZ#2416327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43425"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43427",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:43:48.629000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416329"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43427"
},
{
"category": "external",
"summary": "RHBZ#2416329",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416329"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43427"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43427"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43429",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:44:50.827000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper bounds checking and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43429"
},
{
"category": "external",
"summary": "RHBZ#2416330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43429"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43430",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-11-21T12:45:54.422000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416331"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43430"
},
{
"category": "external",
"summary": "RHBZ#2416331",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416331"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43430"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43430"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43431",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-11-21T12:47:02.159000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43431"
},
{
"category": "external",
"summary": "RHBZ#2416332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43431"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43432",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:47:57.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43432"
},
{
"category": "external",
"summary": "RHBZ#2416334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43432"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43433",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:10:29.110000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43433"
},
{
"category": "external",
"summary": "RHBZ#2448783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43433"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:49:09.733000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43434"
},
{
"category": "external",
"summary": "RHBZ#2416335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43434"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43434"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43438",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-03-18T20:11:28.807000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43438"
},
{
"category": "external",
"summary": "RHBZ#2448784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43438"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-43440",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:50:27.289000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43440"
},
{
"category": "external",
"summary": "RHBZ#2416336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43440"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43440"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43441",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T20:12:39.416000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43441"
},
{
"category": "external",
"summary": "RHBZ#2448785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43441"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43443",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-11-21T12:51:26.005000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43443"
},
{
"category": "external",
"summary": "RHBZ#2416337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43443"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43443"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43458",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-12-04T16:02:08.461000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418855"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43458"
},
{
"category": "external",
"summary": "RHBZ#2418855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43458"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-66287",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2025-12-04T16:04:58.978000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"
},
{
"category": "external",
"summary": "RHBZ#2418857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66287"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0009.html",
"url": "https://webkitgtk.org/security/WSA-2025-0009.html"
}
],
"release_date": "2025-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-18T09:30:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23583"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.src",
"7Server-optional-ELS:webkitgtk4-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-debuginfo-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-devel-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-doc-0:2.50.3-2.el7_9.noarch",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-0:2.50.3-2.el7_9.x86_64",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.ppc64le",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.s390x",
"7Server-optional-ELS:webkitgtk4-jsc-devel-0:2.50.3-2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…