RHSA-2025:19352 — Security Advisory

Red Hat Security Advisory: webkitgtk4 security update

Loading…

Severity

Important

Red Hat Product Security

RHEL 7

Products

Official CSAF product identity

Published · October 31, 2025

Updated · September 1, 2026

Topic

An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3.

Security Fix(es):

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)
webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.