RHSA-2025:8194: Important: webkit2gtk3 security update
Important: webkit2gtk3 security update
Other sources
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.Security Fix(es): webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192) webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467) webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551) webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208) webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209) webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216) webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427)For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:8194?
The severity of RHSA-2025:8194 is classified as Important.
How do I fix RHSA-2025:8194?
To fix RHSA-2025:8194, you should update the webkit2gtk3 package to version 2.48.1-2.el8_2 or later.
What are the risks associated with RHSA-2025:8194?
The risks associated with RHSA-2025:8194 include potential process crashes due to the processing of maliciously crafted web content.
Who is affected by RHSA-2025:8194?
RHSA-2025:8194 affects users of the webkit2gtk3 package on Red Hat Enterprise Linux systems.
Is there a specific version to upgrade to for RHSA-2025:8194?
Yes, you should upgrade to webkit2gtk3 version 2.48.1-2.el8_2 to mitigate the vulnerability in RHSA-2025:8194.