Back Linuxsecurity

Fedora 42: webkitgtk Critical Fix for CVE-2025

Linuxsecurity •LinuxSecurity Advisories • January 2, 2026

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. Update Information : Correctly handle the program name passed to the sleep disabler. Ensure GStreamer is initialized before using the Quirks. Fix several crashes and rendering issues. Fix CVE-2025-14174, CVE-2025-43501, CVE-2025-43529, CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541

WebKitGTK is the port of the WebKit web rendering engine to the

Correctly handle the program name passed to the sleep disabler. Ensure GStreamer is initialized before using the Quirks. Fix several crashes and rendering issues. Fix CVE-2025-14174, CVE-2025-43501, CVE-2025-43529, CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541

* Tue Dec 16 2025 Tomas Popela - 2.50.4-1 - Update to 2.50.4

[ 1 ] Bug #2423171 - CVE-2025-43529 webkitgtk: webkitgtk: Use-after-free due to improper memory management [fedora-42] [ 2 ] Bug #2423291 - CVE-2025-43501 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash [fedora-42] [ 3 ] Bug #2423295 - CVE-2025-43531 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash [fedora-42] [ 4 ] Bug #2423301 - CVE-2025-43535 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash [fedora-42] [ 5 ] Bug #2423305 - CVE-2025-43536 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash [fedora-42] Read the Full Advisory

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-3e5ba4315a' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Fix for Multiple CVEs in WebKitGTK for Fedora 42 Fedora 42 has released a critical fix addressing several vulnerabilities in WebKitGTK, including CVE-2025-14174 and others. The update ensures proper handling of program names and initialization of GStreamer, fixing multiple crashes and rendering issues. Users of Fedora 42 are advised to update to mitigate these vulnerabilities. 1 sources 34

Extracted Entities

CVEs (7)

CVE-2025-14174 CVE-2025-43501 CVE-2025-43529 CVE-2025-43531 CVE-2025-43535 CVE-2025-43536 CVE-2025-43541