{"id":"CLSA-2025-1767001828","summary":"webkit2gtk3: Fix of 15 CVEs","details":"- Update to 2.50.3\n- Fix multiple security issues that could lead to crashes, memory corruption,\n  or information disclosure when processing malicious web content:\n  - CVE-2025-66287\n  - CVE-2025-43458\n  - CVE-2025-43421\n  - CVE-2025-13947\n- Includes fixes previously released in version 2.50.2:\n  - CVE-2025-13502: fix out-of-bounds read and integer underflow\n  - CVE-2025-43443: fix unexpected process crash from malicious web content\n  - CVE-2025-43440: fix DFG constant folding to skip unreachable blocks\n  - CVE-2025-43434: fix use-after-free in WebAssembly globals and tables\n  - CVE-2025-43432: fix use-after-free in WasmFunctionParser\n  - CVE-2025-43431: fix dangling pointer in WebAssembly struct field types\n  - CVE-2025-43430: fix BBQ JIT writing to incorrect stack slots\n  - CVE-2025-43429: fix insufficient bounds checking in Unicode string handling\n  - CVE-2025-43427: fix wrong jump table state handling that could lead to crashes\n  - CVE-2025-43425: fix DFG node cloning flaw leading to crashes\n  - CVE-2025-43392: fix cross-origin image data leak","modified":"2026-05-27T11:17:41.294699943Z","published":"2026-01-05T15:08:11Z","upstream":["CVE-2025-66287","CVE-2025-43458","CVE-2025-43421","CVE-2025-13947","CVE-2025-13502","CVE-2025-43443","CVE-2025-43440","CVE-2025-43434","CVE-2025-43432","CVE-2025-43431","CVE-2025-43430","CVE-2025-43429","CVE-2025-43427","CVE-2025-43425","CVE-2025-43392"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1767001828.html"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767001828.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767001828.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-jsc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767001828.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-jsc-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767001828.json"}}],"schema_version":"1.7.5"}