Skip to content
OpenAdvisories
High ALSA-2025:3974 8 CVEs

Important: webkit2gtk3 security update

Published Apr 17, 2025 · Updated Nov 2, 2026

Ecosystem: AlmaLinux

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192)
* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467)
* webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551)
* webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 8 webkit2gtk3 2.48.1-1.el8_10
AlmaLinux · 8 webkit2gtk3-devel 2.48.1-1.el8_10
AlmaLinux · 8 webkit2gtk3-jsc 2.48.1-1.el8_10
AlmaLinux · 8 webkit2gtk3-jsc-devel 2.48.1-1.el8_10

Vulnerabilities 8

References

  • report
    https://access.redhat.com/security/cve/CVE-2024-44192
  • report
    https://access.redhat.com/security/cve/CVE-2024-54467
  • report
    https://access.redhat.com/security/cve/CVE-2024-54551
  • report
    https://access.redhat.com/security/cve/CVE-2025-24208
  • report
    https://access.redhat.com/security/cve/CVE-2025-24209
  • report
    https://access.redhat.com/security/cve/CVE-2025-24216
  • report
    https://access.redhat.com/security/cve/CVE-2025-30427
  • report
    https://bugzilla.redhat.com/2353871
  • report
    https://bugzilla.redhat.com/2353872
  • report
    https://bugzilla.redhat.com/2357909
  • report
    https://bugzilla.redhat.com/2357910
  • report
    https://bugzilla.redhat.com/2357911
  • report
    https://bugzilla.redhat.com/2357917
  • report
    https://bugzilla.redhat.com/2357919
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-3974.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2025-24189.html