Skip to content
OpenAdvisories
High ALAS2-2025-2925 5 CVEs

Important: webkitgtk4 security update (Amazon Linux 2)

Published Jul 2, 2025 · Updated Jul 10, 2025

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-31257: This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. CVE-2025-31215: The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected process crash. CVE-2025-31206: A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. CVE-2025-31205: The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-origin. CVE-2025-31204: The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to memory corruption.

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2 webkitgtk4 0:2.46.6-1.amzn2.0.3
Amazon Linux · 2 webkitgtk4-debuginfo 0:2.46.6-1.amzn2.0.3
Amazon Linux · 2 webkitgtk4-devel 0:2.46.6-1.amzn2.0.3
Amazon Linux · 2 webkitgtk4-jsc 0:2.46.6-1.amzn2.0.3
Amazon Linux · 2 webkitgtk4-jsc-devel 0:2.46.6-1.amzn2.0.3

Vulnerabilities 5

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-31204.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-31205.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-31206.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-31215.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-31257.html