Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-31257: This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. CVE-2025-31215: The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected process crash. CVE-2025-31206: A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. CVE-2025-31205: The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-origin. CVE-2025-31204: The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to memory corruption.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | webkitgtk4 | 0:2.46.6-1.amzn2.0.3 |
| Amazon Linux · 2 | webkitgtk4-debuginfo | 0:2.46.6-1.amzn2.0.3 |
| Amazon Linux · 2 | webkitgtk4-devel | 0:2.46.6-1.amzn2.0.3 |
| Amazon Linux · 2 | webkitgtk4-jsc | 0:2.46.6-1.amzn2.0.3 |
| Amazon Linux · 2 | webkitgtk4-jsc-devel | 0:2.46.6-1.amzn2.0.3 |
Vulnerabilities 5
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, ma…
-
Medium 6.5
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequo…
-
Medium 6.5
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7…
-
Medium 4.7
This issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, m…
-
Medium 4.3
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPa…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-31204.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-31205.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-31206.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-31215.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-31257.html