Advisories ยป MGASA-2026-0064

Updated webkit2 packages fix security vulnerabilities

Publication date: 24 Mar 2026
Modification date: 24 Mar 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-43457 , CVE-2026-20608 , CVE-2026-20635 , CVE-2026-20636 , CVE-2026-20644 , CVE-2026-20652 , CVE-2026-20676

Description

CVE-2025-43457 Processing maliciously crafted web content may lead to an
unexpected Safari crash. A use-after-free issue was addressed with improved
memory management.
CVE-2026-20608 Processing maliciously crafted web content may lead to an
unexpected process crash. This issue was addressed through improved state
management.
CVE-2026-20635 Processing maliciously crafted web content may lead to an
unexpected process crash. The issue was addressed with improved memory
handling.
CVE-2026-20636 Processing maliciously crafted web content may lead to an
unexpected process crash. The issue was addressed with improved memory
handling.
CVE-2026-20644 Processing maliciously crafted web content may lead to an
unexpected process crash. The issue was addressed with improved memory
handling.
CVE-2026-20652 A remote attacker may be able to cause a denial-of-service.
The issue was addressed with improved memory handling.
CVE-2026-20676 A website may be able to track users through Safari web
extensions. This issue was addressed through improved state management.

References

SRPMS

9/core