# ALSA-2025:22789: Security update for 4 packages ALSA-2025:22789, released December 8, 2025, fixes 21 CVEs across 4 products. One of them is being exploited (CVE-2023-43000); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/alsa-2025-22789 - Platform: Linux - Released: Dec 8, 2025 - Priority: Patch now (Closes CVE-2023-43000, exploited (CISA KEV)) - CVEs: 21, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2025:22789 ## Applies to | Product | Release | Fixed in | |---|---|---| | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | almalinux 8 | 2.50.3-1.el8_10 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | almalinux 8 | 2.50.3-1.el8_10 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | almalinux 8 | 2.50.3-1.el8_10 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | almalinux 8 | 2.50.3-1.el8_10 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-43000](https://patchblox.com/security/data/cve/CVE-2023-43000.md) | Patch now | webkit2gtk3: This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-202... | 8.8 | 0.0404 | CISA KEV | | [CVE-2025-43429](https://patchblox.com/security/data/cve/CVE-2025-43429.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0145 | | | [CVE-2025-43434](https://patchblox.com/security/data/cve/CVE-2025-43434.md) | High | gir1.2-javascriptcoregtk-4.1: A use-after-free issue was addressed with improved memory management | 8.8 | 0.0128 | | | [CVE-2025-43433](https://patchblox.com/security/data/cve/CVE-2025-43433.md) | High | WebKit: Processing maliciously crafted web content may lead to memory corruption | 8.8 | 0.0117 | | | [CVE-2025-43438](https://patchblox.com/security/data/cve/CVE-2025-43438.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 8.8 | 0.0111 | | | [CVE-2025-43430](https://patchblox.com/security/data/cve/CVE-2025-43430.md) | High | gir1.2-javascriptcoregtk-4.1: This issue was addressed through improved state management | 8.8 | 0.0109 | | | [CVE-2025-43441](https://patchblox.com/security/data/cve/CVE-2025-43441.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0096 | | | [CVE-2025-43431](https://patchblox.com/security/data/cve/CVE-2025-43431.md) | High | gir1.2-javascriptcoregtk-4.1: The issue was addressed with improved memory handling | 8.8 | 0.0086 | | | [CVE-2025-43432](https://patchblox.com/security/data/cve/CVE-2025-43432.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0084 | | | [CVE-2025-43443](https://patchblox.com/security/data/cve/CVE-2025-43443.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0072 | | | [CVE-2025-43425](https://patchblox.com/security/data/cve/CVE-2025-43425.md) | High | gir1.2-javascriptcoregtk-4.1: The issue was addressed with improved memory handling | 8.8 | 0.0071 | | | [CVE-2025-43421](https://patchblox.com/security/data/cve/CVE-2025-43421.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0065 | | | [CVE-2025-13502](https://patchblox.com/security/data/cve/CVE-2025-13502.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkit:... | 8.8 | 0.0062 | | | [CVE-2025-43458](https://patchblox.com/security/data/cve/CVE-2025-43458.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0061 | | | [CVE-2025-43427](https://patchblox.com/security/data/cve/CVE-2025-43427.md) | High | gir1.2-javascriptcoregtk-4.1: This issue was addressed through improved state management | 8.8 | 0.0055 | | | [CVE-2025-43440](https://patchblox.com/security/data/cve/CVE-2025-43440.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0051 | | | [CVE-2025-66287](https://patchblox.com/security/data/cve/CVE-2025-66287.md) | High | gir1.2-webkit2-4.1: A flaw was found in WebKitGTK | 8.8 | 0.0051 | | | [CVE-2025-43392](https://patchblox.com/security/data/cve/CVE-2025-43392.md) | High | WebKit Canvas: A website may exfiltrate image data cross-origin | 8.8 | 0.0050 | | | [CVE-2025-43480](https://patchblox.com/security/data/cve/CVE-2025-43480.md) | High | WebKit: A malicious website may exfiltrate data cross-origin | 8.8 | 0.0049 | | | [CVE-2025-43419](https://patchblox.com/security/data/cve/CVE-2025-43419.md) | High | WebKit: Processing maliciously crafted web content may lead to memory corruption | 8.8 | 0.0040 | | | [CVE-2025-13947](https://patchblox.com/security/data/cve/CVE-2025-13947.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkit:... | 8.8 | 0.0036 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo