Bug 2357919 (CVE-2025-30427)
| Summary: | CVE-2025-30427 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | inclined.duck.ptck |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2358001, 2358002 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2025-04-07 14:33:42 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2025:3713 https://access.redhat.com/errata/RHSA-2025:3713 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Extended Update Support Via RHSA-2025:3755 https://access.redhat.com/errata/RHSA-2025:3755 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Extended Update Support Via RHSA-2025:3756 https://access.redhat.com/errata/RHSA-2025:3756 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2025:3974 https://access.redhat.com/errata/RHSA-2025:3974 CVE-2025-30427 is a use-after-free vulnerability in WebKitGTK and WPE WebKit that can cause Safari to crash when processing maliciously crafted web content. The issue has been addressed through improved memory management, and Red Hat has released a patch under https://bugzilla.redhat.com/show_bug.cgi?id=2357919 https://crazy-cattle3d.com. This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Extended Update Support Via RHSA-2025:4445 https://access.redhat.com/errata/RHSA-2025:4445 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2025:7387 https://access.redhat.com/errata/RHSA-2025:7387 This issue has been addressed in the following products: Red Hat OpenShift Dev Spaces 3 Containers Via RHSA-2025:7998 https://access.redhat.com/errata/RHSA-2025:7998 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Via RHSA-2025:8065 https://access.redhat.com/errata/RHSA-2025:8065 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat Enterprise Linux 8.4 Telecommunications Update Service Via RHSA-2025:8064 https://access.redhat.com/errata/RHSA-2025:8064 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat Enterprise Linux 8.6 Telecommunications Update Service Via RHSA-2025:8066 https://access.redhat.com/errata/RHSA-2025:8066 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Extended Lifecycle Support Via RHSA-2025:10364 https://access.redhat.com/errata/RHSA-2025:10364 |