Red Hat 製品エラータ RHSA-2025:8531 - Security Advisory
発行日:
2025-06-04
更新日:
2025-06-04

RHSA-2025:8531 - Security Advisory

概要

Important: webkit2gtk3 update

タイプ/重大度

Security Advisory: Important

Red Hat Lightspeed パッチ分析

このアドバイザリーの影響を受けるシステムを特定し、修正します。

影響を受けるシステムの表示

トピック

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.2
Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

説明

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • webkitgtk: A malicious website may exfiltrate data cross-origin

(CVE-2025-31205)

  • webkitgtk: Processing maliciously crafted web content may lead to an

unexpected Safari crash (CVE-2025-31257)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解決策

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

影響を受ける製品

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

修正

  • BZ - 2366501 - CVE-2025-31205 webkitgtk: A malicious website may exfiltrate data cross-origin
  • BZ - 2366504 - CVE-2025-31257 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
webkit2gtk3-2.48.2-1.el8_2.src.rpm SHA-256: 6bdd75877b4475cf84b0c39c781dc8a0372f1aca4a14d7f1fb81833c8325e397
x86_64
webkit2gtk3-2.48.2-1.el8_2.i686.rpm SHA-256: 60c92c50a2f972c4e1a49faea3cf4639664b26467ba829a4ea7de665c71b509b
webkit2gtk3-2.48.2-1.el8_2.x86_64.rpm SHA-256: 740110d4e3bcc88ca3ab090c9450f077c38d9534585bfbeb9cfd824a1e7cf11a
webkit2gtk3-debuginfo-2.48.2-1.el8_2.i686.rpm SHA-256: 603f02db72b4cd2fc66da6677e9f3bce92c03f7da0837f42977c6174e345bd47
webkit2gtk3-debuginfo-2.48.2-1.el8_2.x86_64.rpm SHA-256: d2f77aef3f50afbff47ff60768ff7d4474b275aec2df7f2642243ec274fae016
webkit2gtk3-debugsource-2.48.2-1.el8_2.i686.rpm SHA-256: 776836455061f340dcb48f2cfb6259559e1acc9d548c14ac170db06b7103b239
webkit2gtk3-debugsource-2.48.2-1.el8_2.x86_64.rpm SHA-256: 575fb8f30609386a85b72dbdb7aa3776e96f56f29a8c9995260c14fc832a60d6
webkit2gtk3-devel-2.48.2-1.el8_2.i686.rpm SHA-256: 2e8a3b4183d1a72a9bf2b191620c803298ae7de3be483bad6d204db82e8ddffa
webkit2gtk3-devel-2.48.2-1.el8_2.x86_64.rpm SHA-256: 4e4ad1c9c2d99b850b952464b62be59306d34c9001d65f20b75b9931eef76427
webkit2gtk3-devel-debuginfo-2.48.2-1.el8_2.i686.rpm SHA-256: dacec9e900f4621efd2b86b0a71fdeaae1d0d6e54bc012016c686c1864b2e04a
webkit2gtk3-devel-debuginfo-2.48.2-1.el8_2.x86_64.rpm SHA-256: 141de2c41d932c5463c52f364e52f7ecedeac56cd32701383ad67dc8d2f02075
webkit2gtk3-jsc-2.48.2-1.el8_2.i686.rpm SHA-256: 8b0a9a9fd4b8b5538c2caf861df4ce849db7fd871890a7a36d85bb5e554872a9
webkit2gtk3-jsc-2.48.2-1.el8_2.x86_64.rpm SHA-256: a7e8b3205f9d7ae94635ba0d298a5566a5a17b30225965e0a5e2b70d50ae96a0
webkit2gtk3-jsc-debuginfo-2.48.2-1.el8_2.i686.rpm SHA-256: 5db69dd7a0ca71214783b186adebfb6dbe0f00faa1f09a1e841ec874fdfd763b
webkit2gtk3-jsc-debuginfo-2.48.2-1.el8_2.x86_64.rpm SHA-256: 545836fbab9238b4d95ba4f490febf9fd9c830b49b14cd720366ac8bb1ac1b1c
webkit2gtk3-jsc-devel-2.48.2-1.el8_2.i686.rpm SHA-256: 907818783d8d75a26ffe0269d44f1a2a7d9f88c54bd5c775c01280e0cf2f77dd
webkit2gtk3-jsc-devel-2.48.2-1.el8_2.x86_64.rpm SHA-256: 9c8a463c2c1619553380dbc095851ac09c1e23521e19f6c4dd82d21ecff48fe9
webkit2gtk3-jsc-devel-debuginfo-2.48.2-1.el8_2.i686.rpm SHA-256: 3d75d1b5f4ddabcb335d60306b73fb7a4202762a23b3d0a5ad47e17fc0dfdfd7
webkit2gtk3-jsc-devel-debuginfo-2.48.2-1.el8_2.x86_64.rpm SHA-256: 199fb52eadd8e022e5d1ec9b53522a76a62d4bd3c01ec6d163beba9b8034eb50

Red Hat のセキュリティーに関する連絡先は secalert@redhat.com です。 連絡先の詳細は https://access.redhat.com/security/team/contact/ をご覧ください。