RHSA-2025%3A0145 | Vulnetix

RHSA-2025%3A0145 PUBLISHED CVSS 8.800000190734863 HIGH

Record from OSV · Published January 10, 2025

Red Hat Security Advisory: webkit2gtk3 security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
webkit2gtk3-devel-debuginfo	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10
webkit2gtk3-devel	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10
webkit2gtk3-jsc-devel	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10
webkit2gtk3-debuginfo	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10
webkit2gtk3-jsc-debuginfo	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10
webkit2gtk3-jsc-devel-debuginfo	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10
webkit2gtk3-jsc	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10
webkit2gtk3-debugsource	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10
webkit2gtk3	Red Hat:enterprise_linux:8::appstream	2.46.5-1.el8, 0:2.46.5-1.el8_10

Risk scores

CVSS 3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Red Hat:enterprise_linux:8::appstream	webkit2gtk3-devel-debuginfo	0, 0
Red Hat:enterprise_linux:8::appstream	webkit2gtk3-devel	0, 0
Red Hat:enterprise_linux:8::appstream	webkit2gtk3-jsc-devel	0, 0
Red Hat:enterprise_linux:8::appstream	webkit2gtk3-debuginfo	0, 0
Red Hat:enterprise_linux:8::appstream	webkit2gtk3-jsc-debuginfo	0, 0
Red Hat:enterprise_linux:8::appstream	webkit2gtk3-jsc-devel-debuginfo	0, 0
Red Hat:enterprise_linux:8::appstream	webkit2gtk3-jsc	0, 0
Red Hat:enterprise_linux:8::appstream	webkit2gtk3-debugsource	0, 0
Red Hat:enterprise_linux:8::appstream	webkit2gtk3	0, 0

Timeline

Jan 10, 2025 CVE Published
Mar 18, 2026 CVE Updated
May 1, 2026 Distribution Patch (2 in total, the first dated here)
May 1, 2026 Security Advisory (5 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2025%3A0145
vulnetix vdb fixes RHSA-2025%3A0145

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2025%253A0145/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://access.redhat.com/errata/RHSA-2025:0145 advisory
https://access.redhat.com/security/updates/classification/#important article
https://bugzilla.redhat.com/show_bug.cgi?id=2333841 report
https://bugzilla.redhat.com/show_bug.cgi?id=2333843 report
https://access.redhat.com/security/cve/CVE-2024-54479 report
https://www.cve.org/CVERecord?id=CVE-2024-54479 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-54479 advisory
https://support.apple.com/en-us/121838 article
https://support.apple.com/en-us/121839 article
https://support.apple.com/en-us/121843 article
https://support.apple.com/en-us/121846 article
https://access.redhat.com/security/cve/CVE-2024-54505 report
https://www.cve.org/CVERecord?id=CVE-2024-54505 advisory
https://access.redhat.com/security/cve/CVE-2024-54508 report
https://nvd.nist.gov/vuln/detail/CVE-2024-54508 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2333844 report
https://bugzilla.redhat.com/show_bug.cgi?id=2333845 report
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0145.json advisory
https://support.apple.com/en-us/121837 article
https://support.apple.com/en-us/121844 article

…and 6 more

Look up in the Resolve Platform →