This update for webkit2gtk3 fixes the following issues:
Security issues fixed:
WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):
- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap
corruption via a crafted HTML page.
- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to
remote code execution.
- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local
escalation of privilege.
- CVE-2024-43767: Heap overflow due to improper in
This update for webkit2gtk3 fixes the following issues:
- CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728,
CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787:
WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791).
Changes for webkit2gtk3:
- Update to version 2.52.6
This update for webkit2gtk3 fixes the following issues:
- CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution
(bsc#1271638).
- CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash (bsc#1271638).
- CVE-2026-43663: maliciously crafted web content can lead to an unexpected process crash (bsc#1271638).
- CVE-2026-43676: out-of-bounds access when processing web content can lead to an unexpected Safari crash
(bsc#1271638).
- CVE-2026-43699: use-after-free issue when processing web content can lead to an unexpected process crash
(bsc#1271638).
- CVE-2026-4
This update for webkit2gtk3 fixes the following issues
Update to version 2.52.4:
Security fixes:
- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code
execution due to a heap buffer overflow (bsc#1267506).
- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-
free issue (bsc#1267507).
- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper
memory handling (bsc#1267508).
- CVE-2026-28902: processing maliciously crafted web content may lead to a
This update for webkit2gtk3 fixes the following issues:
Update to version 2.52.0.
Security issues fixed:
- CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950).
- CVE-2025-31223: processing maliciously crafted web content may lead to memory corruption (bsc#1259949).
- CVE-2025-31277: processing maliciously crafted web content may lead to memory corruption (bsc#1259948).
- CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash (bsc#1259947).
- CVE-2025-43214: processing maliciously crafted web content may lead to an unexpected crash (bsc#1259946).
- CV
This update for webkit2gtk3 fixes the following issues:
Update to version 2.50.4.
Security issues fixed:
- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a
UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).
- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of
verification of the origins of drag operations (bsc#1254473).
- CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation
(bsc#1255497).
- CVE-2025-43392: websites m
This update for webkit2gtk3 fixes the following issues:
- CVE-2025-43343: improved memory handling in web content processing to prevent process crash (bsc#1251975)
- CVE-2025-43272: improved memory handling to prevent unexpected process crash (bsc#1250439)
- CVE-2025-43342: correctness issue was addressed with improved checks to prevent unexcepted process crash (bsc#1250440)
- CVE-2025-43356: improved handling of caches to prevent sensor access without consent (bsc#1250441)
- CVE-2025-43368: improved memory management to prevent a use-after-free (bsc#1250442)
This update for webkit2gtk3 fixes the following issues:
Updated to version 2.48.5:
- CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564)
- CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web content may lead to memory corruption. (bsc#1247563)
- CVE-2025-43211: Fixed a vulnerability where processing web content may lead to a denial-of-service. (bsc#1247562)
- CVE-2025-43212: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247595)
- CVE-2025-43216: Fixed a
This update for webkit2gtk3 fixes the following issues:
Update to version 2.48.2.
Security issues fixed:
- CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicious website (bsc#1243282).
- CVE-2025-31204: improper memory handling when processing certain web content may lead to memory corruption
(bsc#1243286).
- CVE-2025-31206: type confusion issue when processing certain web content may lead to an unexpected crash
(bsc#1243288).
- CVE-2025-31215: lack of checks when processing certain web content may lead to an unexpected crash (bsc#1243289).
- CVE-2025-31257: improper memory handling when processin