Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

WebKitGTK3 Vulnerability in Red Hat Enterprise Linux

published 11 months ago

Summary

An update is available for WebKitGTK3, a web browser engine, to fix a security issue. This issue could potentially allow an attacker to execute malicious code on a victim's system. Affected users should update their system to the latest version of WebKitGTK3 to ensure they have the latest security patches.

What to do

Update redhat webkit2gtk3 to version 0:2.50.3-1.el9_7.
Update redhat webkit2gtk3-debuginfo to version 0:2.50.3-1.el9_7.
Update redhat webkit2gtk3-debugsource to version 0:2.50.3-1.el9_7.
Update redhat webkit2gtk3-devel to version 0:2.50.3-1.el9_7.
Update redhat webkit2gtk3-devel-debuginfo to version 0:2.50.3-1.el9_7.
Update redhat webkit2gtk3-jsc to version 0:2.50.3-1.el9_7.
Update redhat webkit2gtk3-jsc-debuginfo to version 0:2.50.3-1.el9_7.
Update redhat webkit2gtk3-jsc-devel to version 0:2.50.3-1.el9_7.
Update redhat webkit2gtk3-jsc-devel-debuginfo to version 0:2.50.3-1.el9_7.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3-debuginfo	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3-debugsource	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3-devel	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3-devel-debuginfo	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3-jsc	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3-jsc-debuginfo	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3-jsc-devel	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7
Red Hat:enterprise_linux:9::appstream	redhat	webkit2gtk3-jsc-devel-debuginfo	< 0:2.50.3-1.el9_7 Fix: upgrade to 0:2.50.3-1.el9_7

Original advisory text

Red Hat Security Advisory: webkit2gtk3 security update

References

https://access.redhat.com/errata/RHSA-2025:22790 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416300 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416325 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416327 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416329 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416330 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416331 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416332 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416334 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416335 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416336 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416337 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416355 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2418576 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2418855 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2418857 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22790.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-13502 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-13502 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-13502 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=302218 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-13947 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-13947 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-13947 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=271957 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-43392 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43392 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43392 Vendor Advisory
https://webkitgtk.org/security/WSA-2025-0008.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-43421 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43421 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43421 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43425 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43425 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43425 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43427 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43427 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43427 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43429 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43429 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43429 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43430 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43430 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43430 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43431 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43431 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43431 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43432 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43432 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43432 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43433 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2448783 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43433 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43433 Vendor Advisory
https://webkitgtk.org/security/WSA-2026-0001.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-43434 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43434 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43434 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43438 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2448784 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43438 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43438 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43440 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43440 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43440 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43441 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2448785 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43441 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43441 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43443 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43443 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43443 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43458 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43458 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43458 Vendor Advisory
https://webkitgtk.org/security/WSA-2025-0009.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-66287 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-66287 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-66287 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published8 Dec 2025

Updated15 Jul 2026

First seen15 Jul 2026

Sources

RHSA-2025:22790 · OSV

Track software like this

Free during beta