Linux · Security advisory · January 16, 2026

RHSA-2025:23700: Security update for 4 packages

RHSA-2025:23700, released January 16, 2026, fixes 7 CVEs across 4 products. 2 of them are being exploited (CVE-2025-14174); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV
CVEs closed
7
None rated Critical
Exploited
2
CVE-2025-14174
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.5533
99th percentile

Priority of the 7 CVEs

Patch now 2 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
webkit2gtk3RHEL 90:2.50.4-1.el9_7
webkit2gtk3-develRHEL 90:2.50.4-1.el9_7
webkit2gtk3-jscRHEL 90:2.50.4-1.el9_7
webkit2gtk3-jsc-develRHEL 90:2.50.4-1.el9_7

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-14174 Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE 8.8 0.5533 KEVExploited
Patch now CVE-2025-43529 dyld: An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report. 8.8 0.2565 KEVExploited
High CVE-2025-43541 WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash 8.8 0.3414 None reported
High CVE-2025-43535 WebKit: Processing maliciously crafted web content may lead to an unexpected process crash 8.8 0.0085 None reported
High CVE-2025-43501 WebKit: Processing maliciously crafted web content may lead to an unexpected process crash 8.8 0.0077 None reported
High CVE-2025-43536 WebKit: Processing maliciously crafted web content may lead to an unexpected process crash 8.8 0.0058 None reported
High CVE-2025-43531 WebKit: Processing maliciously crafted web content may lead to an unexpected process crash 8.8 0.0045 None reported
Showing 1 to 7 of 7 1