Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 18

Vulnerabilities 7

• High 8.8
  CVE-2025-31277 Exploited Public exploit

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025

  KEV Mar 20, 2026
• Critical 9.8
  CVE-2025-43342

  A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Sep 15, 2025
• High 8.8
  CVE-2025-43419

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• High 8.0
  CVE-2025-31223

  The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequo…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  May 12, 2025
• Medium 6.5
  CVE-2025-43272

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Sep 15, 2025
• Medium 6.5
  CVE-2025-43356

  The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, i…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Sep 15, 2025
• Medium 4.3
  CVE-2025-43368

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPad…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Sep 15, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2397626
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2397627
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2397628
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2397630
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19165.json
• report
  https://access.redhat.com/security/cve/CVE-2025-31223
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448779
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-31223
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-31223
• article
  https://webkitgtk.org/security/WSA-2026-0001.html
• report
  https://access.redhat.com/security/cve/CVE-2025-31277
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448780
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-31277
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-31277
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2025-43272
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43272
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43272
• article
  https://github.com/WebKit/WebKit/commit/fa85413077accf8c881ff88684eb5dcc6ddebea2
• article
  https://webkitgtk.org/security/WSA-2025-0006.html
• report
  https://access.redhat.com/security/cve/CVE-2025-43342
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43342
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43342
• article
  https://github.com/WebKit/WebKit/commit/f3f7e7880c36ac7d0735efc084c618382194382e
• report
  https://access.redhat.com/security/cve/CVE-2025-43356
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43356
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43356
• article
  https://github.com/WebKit/WebKit/commit/fbe01734a08b94759e2a1759bcf0ea1f279c95a4
• report
  https://access.redhat.com/security/cve/CVE-2025-43368
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43368
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43368
• article
  https://github.com/WebKit/WebKit/commit/674611789255a98f96b4504c7d04034e0ae5908a
• report
  https://access.redhat.com/security/cve/CVE-2025-43419
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2416326
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43419
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43419
• article
  https://webkitgtk.org/security/WSA-2025-0008.html