RHSA-2025:23975 — Security Advisory

Red Hat Security Advisory: webkitgtk4 security update

Loading…

Severity

Important

Red Hat Product Security

RHEL 7

Products

Official CSAF product identity

Published · December 24, 2025

Updated · November 4, 2026

Topic

An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3.

Security Fix(es):

webkitgtk: webkitgtk: Use-after-free due to improper memory management (CVE-2025-43529)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43501)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43531)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43535)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43536)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43541)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.