webkit2gtk3-2.48.5-1.el8_10.ML.1
エラータID: AXSA:2025-10757:15
リリース日:
2025/08/20 Wednesday - 09:24
題名:
webkit2gtk3-2.48.5-1.el8_10.ML.1
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- WebKitGTK には、メモリ処理が不適切な問題があるため、リモートの
攻撃者により、メモリ破壊を可能とする脆弱性が存在します。
(CVE-2025-31273)
- WebKitGTK には、メモリ処理が不適切な問題があるため、リモートの
攻撃者により、メモリ破壊を可能とする脆弱性が存在します。
(CVE-2025-31278)
- WebKitGTK には、メモリ処理が不適切な問題があるため、リモートの
攻撃者により、サービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2025-43211)
- WebKitGTK には、メモリ処理が不適切な問題があるため、リモートの
攻撃者により、予期せぬプロセスクラッシュの発生を可能とする脆弱性
が存在します。(CVE-2025-43212)
- WebKitGTK には、メモリ領域の解放後利用の問題があるため、リモート
の攻撃者により、予期せぬプロセスクラッシュの発生を可能とする脆弱性
が存在します。(CVE-2025-43216)
- WebKitGTK には、リモートの攻撃者により、ユーザの機密情報の漏洩
を可能とする脆弱性が存在します。(CVE-2025-43227)
- WebKitGTK には、リモートの攻撃者により、ファイルダウンロード元
の情報の改ざんを可能とする脆弱性が存在します。(CVE-2025-43240)
- WebKitGTK には、メモリ領域の範囲外読み取りの問題があるため、
リモートの攻撃者により、情報の漏洩を可能とする脆弱性が存在します。
(CVE-2025-43265)
- WebKitGTK には、入力データのチェック処理に不備があるため、
リモートの攻撃者により、情報の漏洩、データ破壊、およびサービス
拒否攻撃を可能とする脆弱性が存在します。(CVE-2025-6558)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-31273
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to memory corruption.
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-31278
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iPadOS 17.7.9, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iPadOS 17.7.9, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-43211
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing web content may lead to a denial-of-service.
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing web content may lead to a denial-of-service.
CVE-2025-43212
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43216
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, watchOS 11.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, tvOS 18.6, macOS Sequoia 15.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, watchOS 11.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, tvOS 18.6, macOS Sequoia 15.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43227
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may disclose sensitive user information.
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2025-43240
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, Safari 18. 6. A download's origin may be incorrectly associated.
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, Safari 18. 6. A download's origin may be incorrectly associated.
CVE-2025-43265
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may disclose internal states of the app.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-6558
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
追加情報:
N/A
ダウンロード:
SRPMS
- webkit2gtk3-2.48.5-1.el8_10.ML.1.src.rpm
MD5: 111f9e50084076d21409e911aaeda5b8
SHA-256: 937bf21ed386ae957edbda4a1f6a445c1ec18d40250f6b372771b9abb1d26b1f
Size: 42.15 MB
Asianux Server 8 for x86_64
- webkit2gtk3-2.48.5-1.el8_10.ML.1.i686.rpm
MD5: 7ffe75dd044250ba1c1b344120ce3bf2
SHA-256: 2e3219d79fa3078e422a1dc394071980c12702913bb215431ed19962efd02f03
Size: 26.53 MB - webkit2gtk3-2.48.5-1.el8_10.ML.1.x86_64.rpm
MD5: a4d842f8a32de765e3059844f912e309
SHA-256: 79a9119713860179ec05a64cbe878eaf9f9cde540360765c737ce39d32a61fff
Size: 26.41 MB - webkit2gtk3-devel-2.48.5-1.el8_10.ML.1.i686.rpm
MD5: 5b4257e277938ce7a7dcb03fd19f466f
SHA-256: 23ef574fabb004fc2882ed027520d97a230941d7c56a0833106475e634d9a32e
Size: 307.63 kB - webkit2gtk3-devel-2.48.5-1.el8_10.ML.1.x86_64.rpm
MD5: ec988181cf47f02d8b0e6ff239e85c06
SHA-256: ede4a05c125e7bb06058ea4b9814866a95fdc194df43968d5bd5861f0cf65d6d
Size: 309.25 kB - webkit2gtk3-jsc-2.48.5-1.el8_10.ML.1.i686.rpm
MD5: 1392196a8156e102b3223d14150665e3
SHA-256: e7707de785f88b2a96e9186a68d2317d0cd6df28d69ef60c879724c4d9881854
Size: 3.87 MB - webkit2gtk3-jsc-2.48.5-1.el8_10.ML.1.x86_64.rpm
MD5: 0fea6ff17aa6b907cb9174dcdc22374f
SHA-256: f459ff72d2a0d7310ac1fd6f549ec3dc243903a878e2bb3fa60a7ff9401bfc12
Size: 7.71 MB - webkit2gtk3-jsc-devel-2.48.5-1.el8_10.ML.1.i686.rpm
MD5: e882e15e329e0490646bd93f23616b12
SHA-256: b320128cd8365fa6fc32df2c3e7474654c544b704d84ad96bec294993757bbdf
Size: 165.08 kB - webkit2gtk3-jsc-devel-2.48.5-1.el8_10.ML.1.x86_64.rpm
MD5: 9d79f4ef4e002c19ca379df0c3e30486
SHA-256: 95b678d6ff50f24e494de99d3220819f079dbf8b78cde899c69c8974e22025c0
Size: 162.38 kB
English