webkit2gtk3-2.48.2-1.el8_10.ML.1

エラータID: AXSA:2025-9958:09

Release date: 
Thursday, May 22, 2025 - 17:39
Subject: 
webkit2gtk3-2.48.2-1.el8_10.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-31257)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-31205
The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-origin.
CVE-2025-31257
This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Solution: 

Update packages.

CVEs: 
CVE-2025-31205
The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-origin.
CVE-2025-31257
This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Additional Info: 

N/A

Download: 

SRPMS
  1. webkit2gtk3-2.48.2-1.el8_10.ML.1.src.rpm
    MD5: 2d6bd308ae7eb1d4cc80c4b1a1e7a5dd
    SHA-256: 3d6e82a8be99fa1948fc25cce710f67b52deb401752225cdab00ac55d7c8dd81
    Size: 42.19 MB

Asianux Server 8 for x86_64
  1. webkit2gtk3-2.48.2-1.el8_10.ML.1.i686.rpm
    MD5: f2c7573f9ea8cb7caf56617d823cf235
    SHA-256: 33d0431979c112b54ffe17ebae4d2510510e78956ffa2f6f527922a1a2a0d79b
    Size: 26.54 MB
  2. webkit2gtk3-2.48.2-1.el8_10.ML.1.x86_64.rpm
    MD5: 3984fc37c3a1c40a9ce1a368ca8d0ddb
    SHA-256: 3005b3c3efab786a8eb81b213ceafaabab23b5de8bfba9d2ddbc73e62b8edad1
    Size: 26.46 MB
  3. webkit2gtk3-devel-2.48.2-1.el8_10.ML.1.i686.rpm
    MD5: 6dcc00d98c5a1b01150776be9e2b7da4
    SHA-256: e849613583d56659dbd8b2a153779613a5c147fbb8cd812ff849187b77015a96
    Size: 307.49 kB
  4. webkit2gtk3-devel-2.48.2-1.el8_10.ML.1.x86_64.rpm
    MD5: 854527f45d2cd0b58696e92052961258
    SHA-256: cb975b818f375bf6ca2d2c730c6f6c8b63bed51b41bf6a41c8b0b4f848c108a1
    Size: 308.96 kB
  5. webkit2gtk3-jsc-2.48.2-1.el8_10.ML.1.i686.rpm
    MD5: 0b35eaa062fd735b70b402df177fdb88
    SHA-256: 1474541610fb056d32ab9293e877b69edf457fe66ed63b6b99d3cd768cbe3dd4
    Size: 3.87 MB
  6. webkit2gtk3-jsc-2.48.2-1.el8_10.ML.1.x86_64.rpm
    MD5: 24f6a22e8e2823e64190e4f174c16c45
    SHA-256: 15a9f3461090a2145fae27a1537ba5fd5e9522bb57d270a4faf83c99bdea15c2
    Size: 7.78 MB
  7. webkit2gtk3-jsc-devel-2.48.2-1.el8_10.ML.1.i686.rpm
    MD5: 9414fe5101415c1e7fcb7949bebe0c5e
    SHA-256: 27b3fc776158a3f9b635916c4ec161a91ca8fa414975dd0805040c4dcaeb1ee6
    Size: 165.50 kB
  8. webkit2gtk3-jsc-devel-2.48.2-1.el8_10.ML.1.x86_64.rpm
    MD5: 856c52c752c2e903044d6aa7ad9af753
    SHA-256: 21bf298e0d11593b233bea86abb62f1168fb9b6619242ed1b03d22d41f1d22ee
    Size: 162.92 kB