{"id":"CLSA-2025-1767094035","summary":"webkit2gtk3: Fix of 7 CVEs","details":"- Update to 2.50.4 to fix the following vulnerabilities:\n- CVE-2025-14174: fix memory corruption via improved validation of web content\n- CVE-2025-43501: fix buffer overflow with improved memory handling to\n  prevent process crashes\n- CVE-2025-43529: fix use-after-free in memory management to prevent\n  arbitrary code execution\n- CVE-2025-43531: fix race condition via improved state handling to\n  prevent process crashes\n- CVE-2025-43535: fix unexpected process crash through improved memory handling\n- CVE-2025-43536: fix use-after-free with improved memory management for\n  web content processing\n- CVE-2025-43541: fix type confusion via improved state handling to\n  prevent unexpected crashes","modified":"2026-05-27T11:17:41.987053207Z","published":"2025-12-30T11:27:18Z","upstream":["CVE-2025-14174","CVE-2025-43501","CVE-2025-43529","CVE-2025-43531","CVE-2025-43535","CVE-2025-43536","CVE-2025-43541"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1767094035.html"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-1.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767094035.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-1.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767094035.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-jsc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-1.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767094035.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-jsc-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-1.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1767094035.json"}}],"schema_version":"1.7.5"}