webkit2gtk3-2.50.1-1.el9_7

エラータID: AXSA:2025-11496:19

Release date: 
Tuesday, December 9, 2025 - 01:12
Subject: 
webkit2gtk3-2.50.1-1.el9_7
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)
* webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-43272
The issue was addressed with improved memory handling. This issue is fixed in visionOS 26, Safari 26, iOS 26 and iPadOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43342
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43343
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43356
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. A website may be able to access sensor information without user consent.
CVE-2025-43368
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Solution: 

Update packages.

CVEs: 
CVE-2025-43272
The issue was addressed with improved memory handling. This issue is fixed in visionOS 26, Safari 26, iOS 26 and iPadOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43342
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43343
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43356
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. A website may be able to access sensor information without user consent.
CVE-2025-43368
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Additional Info: 

N/A

Download: 

SRPMS
  1. webkit2gtk3-2.50.1-1.el9_7.src.rpm
    MD5: 4fdfef9e5a4f0289f3cfac56710f74b0
    SHA-256: 1c22e5cca0c563c47eba1a71d6dc90e436a1d88c7ef50d26266b13ad0b7384b3
    Size: 43.22 MB

Asianux Server 9 for x86_64
  1. webkit2gtk3-2.50.1-1.el9_7.i686.rpm
    MD5: 5f0e07e725357027440097b3e47efe1c
    SHA-256: e10276160c795990b8abd0dc8f9f4202406c9557ca07a66944e36f76b1be064d
    Size: 26.66 MB
  2. webkit2gtk3-2.50.1-1.el9_7.x86_64.rpm
    MD5: f7283470ba3edb25e1b061c1c9b4c3b7
    SHA-256: 2406d75f875654603cf7b39eafe565b78565b13e7e7aa53d1c912d49806e719f
    Size: 27.43 MB
  3. webkit2gtk3-devel-2.50.1-1.el9_7.i686.rpm
    MD5: 24d5da68d105c72078021062add3abf0
    SHA-256: 2e4e421e891a088944ffb1db4f3f7051fce6f7e2a2910ca615f4d9fc4675ffdc
    Size: 370.86 kB
  4. webkit2gtk3-devel-2.50.1-1.el9_7.x86_64.rpm
    MD5: 87cd542d6815f53a06ddcae3ab0cc9dc
    SHA-256: 56538578046fb1f56d3d59dda6873f52b5b11084cd141301be44d104b2de42cb
    Size: 368.84 kB
  5. webkit2gtk3-jsc-2.50.1-1.el9_7.i686.rpm
    MD5: b43c540859eef2411a60e1bba8c5fc7f
    SHA-256: a68d6ae1d1d2e26c79f280df25190a93d33fc198a6a8da5cbca9bab5ee941bdf
    Size: 3.97 MB
  6. webkit2gtk3-jsc-2.50.1-1.el9_7.x86_64.rpm
    MD5: d2652085ac5d3f4b8d150756c3e36ae4
    SHA-256: b816556696f8aa17de8e38c46c0c1626dcec1764124414d76488e086d9509b3b
    Size: 8.61 MB
  7. webkit2gtk3-jsc-devel-2.50.1-1.el9_7.i686.rpm
    MD5: dbaacf606ef98b42d23b9e8abe37aedf
    SHA-256: cb8536d8d7ea44e82814942b93c3f2e4f0bb3fba8f8dc0be69427c6bfe4edffb
    Size: 170.72 kB
  8. webkit2gtk3-jsc-devel-2.50.1-1.el9_7.x86_64.rpm
    MD5: 1341bae976b2f71d73dd3c52f8ae8385
    SHA-256: 1971214997875d9ddb5f16a12b585bfa8258bebcbcd14d647da2bd5efad2dbfc
    Size: 160.72 kB