This update for webkit2gtk3 fixes the following issues:
Security issues fixed:
WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):
- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap
corruption via a crafted HTML page.
- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to
remote code execution.
- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local
escalation of privilege.
- CVE-2024-43767: Heap overflow due to improper in
This update for webkit2gtk3 fixes the following issues:
- CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution
(bsc#1271638).
- CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash (bsc#1271638).
- CVE-2026-43663: maliciously crafted web content can lead to an unexpected process crash (bsc#1271638).
- CVE-2026-43676: out-of-bounds access when processing web content can lead to an unexpected Safari crash
(bsc#1271638).
- CVE-2026-43699: use-after-free issue when processing web content can lead to an unexpected process crash
(bsc#1271638).
- CVE-2026-4
This update for webkit2gtk3 fixes the following issues
Update to version 2.52.4:
Security fixes:
- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code
execution due to a heap buffer overflow (bsc#1267506).
- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-
free issue (bsc#1267507).
- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper
memory handling (bsc#1267508).
- CVE-2026-28902: processing maliciously crafted web content may lead to a
This update for webkit2gtk3 fixes the following issues:
Update to version 2.52.0.
Security issues fixed:
- CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950).
- CVE-2025-31223: processing maliciously crafted web content may lead to memory corruption (bsc#1259949).
- CVE-2025-31277: processing maliciously crafted web content may lead to memory corruption (bsc#1259948).
- CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash (bsc#1259947).
- CVE-2025-43214: processing maliciously crafted web content may lead to an unexpected crash (bsc#1259946).
- CV
This update for webkit2gtk3 fixes the following issues:
Update to version 2.50.4.
Security issues fixed:
- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a
UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).
- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of
verification of the origins of drag operations (bsc#1254473).
- CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation
(bsc#1255497).
- CVE-2025-43392: websites m