Advisories » MGASA-2025-0331

Updated webkit2 packages fix security vulnerabilities

Publication date: 21 Dec 2025
Modification date: 21 Dec 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-43501 , CVE-2025-43531 , CVE-2025-43535 , CVE-2025-43536

Description

CVE-2025-43501 Processing maliciously crafted web content may lead to an
unexpected process crash. Description: A buffer overflow issue was
addressed with improved memory handling.
VE-2025-43531Processing maliciously crafted web content may lead to an
unexpected process crash. Description: A race condition was addressed
with improved state handling.
CVE-2025-43535 Processing maliciously crafted web content may lead to an
unexpected process crash. Description: The issue was addressed with
improved memory handling.
CVE-2025-43536 Processing maliciously crafted web content may lead to an
unexpected process crash. Description: A use-after-free issue was
addressed with improved memory management.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34866
• https://webkitgtk.org/security/WSA-2025-0010.html
• https://webkitgtk.org/2025/12/16/webkitgtk2.50.4-released.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43501
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43531
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43535
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43536

SRPMS

9/core

• webkit2-2.50.4-1.mga9