gpp_maybe
Security update for webkit2gtk3
SUSE-SLE-Module-Development-Tools-15-SP7-2025-2765
This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564) - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web content may lead to memory corruption. (bsc#1247563) - CVE-2025-43211: Fixed a vulnerability where processing web content may lead to a denial-of-service. (bsc#1247562) - CVE-2025-43212: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247595) - CVE-2025-43216: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247596) - CVE-2025-43227: Fixed a vulnerability where processing maliciously crafted web content may disclose sensitive user information. (bsc#1247597) - CVE-2025-43228: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1247598) - CVE-2025-43240: Fixed a vulnerability where a download's origin may be incorrectly associated. (bsc#1247599) - CVE-2025-43265: Fixed a vulnerability where processing maliciously crafted web content may disclose internal states of the app. (bsc#1247600) - CVE-2025-6558: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247742) Other fixes: - Improve emoji font selection with USE_SKIA=ON. - Improve playback of multimedia streams from blob URLs. - Fix the build with USE_SKIA_OPENTYPE_SVG=ON and USE_SYSPROF_CAPTURE=ON. - Fix crash when using a WebKitWebView widget in an offscreen window. - Fix several crashes and rendering issues. - Fix a crash introduced by the new threaded rendering implementation using Skia API. - Improve rendering performance by recording layers once and replaying every dirty region in different worker threads. - Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0. - Fix a reference cycle in webkitmediastreamsrc preventing its disposal. - Increase mem_per_process again to avoid running out of memory.
-
Release DateAug 12 2025
-
ReferencesBugzilla: 1247562, 1247563, 1247564, 1247595, 1247596, 1247597, 1247598, 1247599, 1247600, 1247742
CVEs: CVE-2024-44192, CVE-2024-54467, CVE-2025-24189, CVE-2025-24201, CVE-2025-31273, CVE-2025-31278, CVE-2025-43211, CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228, CVE-2025-43240, CVE-2025-43265, CVE-2025-6558 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Development Tools Module 15.7 ppc64le
-
Packagestypelib-1_0-JavaScriptCore-6_0
Introspection bindings for the GTK+ port of the JavaScript Core Enginetypelib-1_0-WebKit-6_02.48.5-150600.12.43.1 lock rpm
Introspection bindings for webkit2gtk4typelib-1_0-WebKitWebProcessExtension-6_02.48.5-150600.12.43.1 lock rpm
Introspection bindings for webkit2gtk4webkit2gtk42.48.5-150600.12.43.1 lock rpm
Library for rendering web content, GTK+ Portwebkit2gtk4-devel2.48.5-150600.12.43.1 lock src
Development files for webkit2gtk42.48.5-150600.12.43.1 lock rpm
Development Tools Module 15.7 s390x
-
Packagestypelib-1_0-JavaScriptCore-6_0
Introspection bindings for the GTK+ port of the JavaScript Core Enginetypelib-1_0-WebKit-6_02.48.5-150600.12.43.1 lock rpm
Introspection bindings for webkit2gtk4typelib-1_0-WebKitWebProcessExtension-6_02.48.5-150600.12.43.1 lock rpm
Introspection bindings for webkit2gtk4webkit2gtk42.48.5-150600.12.43.1 lock rpm
Library for rendering web content, GTK+ Portwebkit2gtk4-devel2.48.5-150600.12.43.1 lock src
Development files for webkit2gtk42.48.5-150600.12.43.1 lock rpm
Development Tools Module 15.7 aarch64
-
Packagestypelib-1_0-JavaScriptCore-6_0
Introspection bindings for the GTK+ port of the JavaScript Core Enginetypelib-1_0-WebKit-6_02.48.5-150600.12.43.1 lock rpm
Introspection bindings for webkit2gtk4typelib-1_0-WebKitWebProcessExtension-6_02.48.5-150600.12.43.1 lock rpm
Introspection bindings for webkit2gtk4webkit2gtk42.48.5-150600.12.43.1 lock rpm
Library for rendering web content, GTK+ Portwebkit2gtk4-devel2.48.5-150600.12.43.1 lock src
Development files for webkit2gtk42.48.5-150600.12.43.1 lock rpm
Development Tools Module 15.7 x86_64
-
Packagestypelib-1_0-JavaScriptCore-6_0
Introspection bindings for the GTK+ port of the JavaScript Core Enginetypelib-1_0-WebKit-6_02.48.5-150600.12.43.1 lock rpm
Introspection bindings for webkit2gtk4typelib-1_0-WebKitWebProcessExtension-6_02.48.5-150600.12.43.1 lock rpm
Introspection bindings for webkit2gtk4webkit2gtk42.48.5-150600.12.43.1 lock rpm
Library for rendering web content, GTK+ Portwebkit2gtk4-devel2.48.5-150600.12.43.1 lock src
Development files for webkit2gtk42.48.5-150600.12.43.1 lock rpm