CLSA-2025-1767094035
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767094035.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1767094035
- Upstream
- Published
- 2025-12-30T11:27:18Z
- Modified
- 2026-06-01T00:32:40.342965726Z
- Summary
- webkit2gtk3: Fix of 7 CVEs
- Details
-
- Update to 2.50.4 to fix the following vulnerabilities:
- CVE-2025-14174: fix memory corruption via improved validation of web content
- CVE-2025-43501: fix buffer overflow with improved memory handling to prevent process crashes
- CVE-2025-43529: fix use-after-free in memory management to prevent arbitrary code execution
- CVE-2025-43531: fix race condition via improved state handling to prevent process crashes
- CVE-2025-43535: fix unexpected process crash through improved memory handling
- CVE-2025-43536: fix use-after-free with improved memory management for web content processing
- CVE-2025-43541: fix type confusion via improved state handling to prevent unexpected crashes
- References
Affected packages
TuxCare:AlmaLinux:9.6 / webkit2gtk3
Package
- Name
- webkit2gtk3
- Purl
- pkg:rpm/tuxcare/webkit2gtk3?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / webkit2gtk3-devel
Package
- Name
- webkit2gtk3-devel
- Purl
- pkg:rpm/tuxcare/webkit2gtk3-devel?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / webkit2gtk3-jsc
Package
- Name
- webkit2gtk3-jsc
- Purl
- pkg:rpm/tuxcare/webkit2gtk3-jsc?distro=almalinux-9.6