Skip to content
OpenAdvisories
High ALSA-2025:18097 5 CVEs

Important: webkit2gtk3 security update

Published Oct 15, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)
* webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 9 webkit2gtk3 2.50.1-0.el9_6
AlmaLinux · 9 webkit2gtk3-devel 2.50.1-0.el9_6
AlmaLinux · 9 webkit2gtk3-jsc 2.50.1-0.el9_6
AlmaLinux · 9 webkit2gtk3-jsc-devel 2.50.1-0.el9_6

Vulnerabilities 5

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-43272
  • report
    https://access.redhat.com/security/cve/CVE-2025-43342
  • report
    https://access.redhat.com/security/cve/CVE-2025-43343
  • report
    https://access.redhat.com/security/cve/CVE-2025-43356
  • report
    https://access.redhat.com/security/cve/CVE-2025-43368
  • report
    https://bugzilla.redhat.com/2397626
  • report
    https://bugzilla.redhat.com/2397627
  • report
    https://bugzilla.redhat.com/2397628
  • report
    https://bugzilla.redhat.com/2397630
  • report
    https://bugzilla.redhat.com/2403598
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-18097.html