Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 27

Vulnerabilities 9

• High 8.8
  CVE-2025-6558 Exploited Public exploit EPSS 11%

  Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote a…

  Google Chrome chromium chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 15, 2025

  KEV Jul 22, 2025
• High 8.8
  CVE-2025-31273

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025
• High 8.8
  CVE-2025-31278

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iP…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025
• High 7.5
  CVE-2025-43227

  This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025
• Medium 6.5
  CVE-2025-43212

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025
• Medium 6.5
  CVE-2025-43216

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025
• Medium 6.2
  CVE-2025-43211

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iP…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025
• Medium 6.2
  CVE-2025-43240

  A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's …

  Apple macOS Safari qtwebkit-source macOS Browsers Debian Ubuntu
  Jul 29, 2025
• Medium 4.0
  CVE-2025-43265

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iP…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2380254
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2384385
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2386268
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2386269
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2386270
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2386271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2386273
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2386274
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2386276
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14433.json
• report
  https://access.redhat.com/security/cve/CVE-2025-6558
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-6558
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-6558
• article
  https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_15.html
• article
  https://issues.chromium.org/issues/427162086
• article
  https://webkitgtk.org/security/WSA-2025-0005.html
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2025-31273
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-31273
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-31273
• report
  https://access.redhat.com/security/cve/CVE-2025-31278
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-31278
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-31278
• report
  https://access.redhat.com/security/cve/CVE-2025-43211
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43211
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43211
• report
  https://access.redhat.com/security/cve/CVE-2025-43212
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43212
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43212
• report
  https://access.redhat.com/security/cve/CVE-2025-43216
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43216
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43216
• report
  https://access.redhat.com/security/cve/CVE-2025-43227
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43227
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43227
• report
  https://access.redhat.com/security/cve/CVE-2025-43240
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43240
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43240