Red Hat Product Errata RHSA-2025:1960 - Security Advisory
Issued:
2025-03-03
Updated:
2025-03-03

RHSA-2025:1960 - Security Advisory

Synopsis

Important: webkit2gtk3 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54543)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24162)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

Fixes

  • BZ - 2344619 - CVE-2024-54543 webkitgtk: Processing maliciously crafted web content may lead to memory corruption
  • BZ - 2344624 - CVE-2025-24162 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
webkit2gtk3-2.46.6-1.el8_2.src.rpm SHA-256: 570087b1c19e67757ab8d07edc24f565a573359db28bf2b43468871c06189842
x86_64
webkit2gtk3-2.46.6-1.el8_2.i686.rpm SHA-256: fe75b73ab710b6a6c0b70c10203162262d6714211b9ff3145a0917ce6c1495f4
webkit2gtk3-2.46.6-1.el8_2.x86_64.rpm SHA-256: db3d4a018cde4d44e9c282842fe8a2967bb826b0aee0db059e09cf9324a467d1
webkit2gtk3-debuginfo-2.46.6-1.el8_2.i686.rpm SHA-256: 4f64b46e17f97ff514eb191b9188734e6a0adcfe179212655334f89288d5405d
webkit2gtk3-debuginfo-2.46.6-1.el8_2.x86_64.rpm SHA-256: 42b7488100b585dfcf6bc096fb80f150670f917c7912c6e2be4429fb543b1509
webkit2gtk3-debugsource-2.46.6-1.el8_2.i686.rpm SHA-256: eaa4bdda4dbfa095b7f0f3b942fa09492d49d0b4295775f5a05dd5cccdb4e582
webkit2gtk3-debugsource-2.46.6-1.el8_2.x86_64.rpm SHA-256: 993eeb5216a7681c731b0d14ccdda1002b271e2a7c7074181a532560dd31265e
webkit2gtk3-devel-2.46.6-1.el8_2.i686.rpm SHA-256: 982eb03ecc77ef96582211f7cf242d4fae964ab2a049523a8f1b0bd90b9f33c0
webkit2gtk3-devel-2.46.6-1.el8_2.x86_64.rpm SHA-256: 751807ed44b1d7ea149061c5c5037e273e826bfb6564700083f48ea8d7e42e17
webkit2gtk3-devel-debuginfo-2.46.6-1.el8_2.i686.rpm SHA-256: af360ff88d764e9e219b28f373a0c2a37f21c2218171de9d37e5ee5948222833
webkit2gtk3-devel-debuginfo-2.46.6-1.el8_2.x86_64.rpm SHA-256: 7aaf00a60f1387104043858eef6db6626b886a0ddf405d8beac99e1238752031
webkit2gtk3-jsc-2.46.6-1.el8_2.i686.rpm SHA-256: 583604dcb79d2fa0aa36c294443908bda1f367c3cf72179e55dbf8706aee73b2
webkit2gtk3-jsc-2.46.6-1.el8_2.x86_64.rpm SHA-256: 8a1245c95075e8e7405561f47689434dbf28d9ab5859ce3e609e08a15b1084f4
webkit2gtk3-jsc-debuginfo-2.46.6-1.el8_2.i686.rpm SHA-256: d8a0076028adbef89581ba7362bbcafd7b4c09aafe60dbc10f972fa22dd7535f
webkit2gtk3-jsc-debuginfo-2.46.6-1.el8_2.x86_64.rpm SHA-256: d9d3250e7c855a57dfbf1960615e2381341d7bb548fae93f2b712b3d57a2f6ce
webkit2gtk3-jsc-devel-2.46.6-1.el8_2.i686.rpm SHA-256: f835a6c93cdf4d1f0d882f19837246c3a98d84ca423e42cf26cffa23c6cf7e8d
webkit2gtk3-jsc-devel-2.46.6-1.el8_2.x86_64.rpm SHA-256: 135d993e91c596f2fe6d18f9f8b3919c5ec4f4512db0a0aefb544e8f97ceb4eb
webkit2gtk3-jsc-devel-debuginfo-2.46.6-1.el8_2.i686.rpm SHA-256: f708f67585bd3bda8e972790022d5ef115b3df965db8c6d96d5f5d1eecb90607
webkit2gtk3-jsc-devel-debuginfo-2.46.6-1.el8_2.x86_64.rpm SHA-256: b16a38ac365fa22343e226e834e569ddcc732315af06995d9de934f0347da33a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.