Linux · Security advisory · August 13, 2025

RHSA-2025:13780: Security update for 4 packages

RHSA-2025:13780, released August 13, 2025, fixes 9 CVEs across 4 products. One of them is being exploited (CVE-2025-6558); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
9
None rated Critical
Exploited
1
CVE-2025-6558
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1093
95th percentile

Priority of the 9 CVEs

Patch now 1 Urgent 0 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
webkit2gtk3RHEL 80:2.48.5-1.el8_10
webkit2gtk3-develRHEL 80:2.48.5-1.el8_10
webkit2gtk3-jscRHEL 80:2.48.5-1.el8_10
webkit2gtk3-jsc-develRHEL 80:2.48.5-1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-6558 Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPU 8.8 0.1093 KEVExploited
High CVE-2025-43227 WebKit: Processing maliciously crafted web content may disclose sensitive user information 8.8 0.0125 None reported
High CVE-2025-31278 WebKit: Processing maliciously crafted web content may lead to memory corruption 8.8 0.0124 None reported
High CVE-2025-31273 libjavascriptcoregtk-4.0-18: The issue was addressed with improved memory handling 8.8 0.0114 None reported
High CVE-2025-43216 WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash 8.8 0.0111 None reported
High CVE-2025-43212 gir1.2-javascriptcoregtk-4.0: The issue was addressed with improved memory handling 8.8 0.0106 None reported
High CVE-2025-43240 WebKit: A download's origin may be incorrectly associated 8.8 0.0101 None reported
High CVE-2025-43211 WebKit: Processing web content may lead to a denial-of-service 8.8 0.0042 None reported
High CVE-2025-43265 WebKit: Processing maliciously crafted web content may disclose internal states of the app 8.8 0.0034 None reported
Showing 1 to 9 of 9 1