Linux · SUSE Linux Enterprise · Security advisory · August 12, 2025
SUSE-SU-2025:02765-1: Security update for 3 packages
SUSE-SU-2025:02765-1, released August 12, 2025, fixes 14 CVEs across 3 products. 2 of them are being exploited (CVE-2025-6558); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV
CVEs closed
14
1 rated Critical
Exploited
2
CVE-2025-6558
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.1093
95th percentile
Priority of the 14 CVEs
Patch now 2
Urgent 0
High 11
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| webkit2gtk3 | opensuse-leap 15.6 | 2.48.5-150600.12.43.1 |
| webkit2gtk3 | sles 15.6 | 2.48.5-150600.12.43.1 |
| webkit2gtk3 | sles 15.7 | 2.48.5-150600.12.43.1 |
| webkit2gtk3-soup2 | opensuse-leap 15.6 | 2.48.5-150600.12.43.1 |
| webkit2gtk3-soup2 | sles 15.6 | 2.48.5-150600.12.43.1 |
| webkit2gtk3-soup2 | sles 15.7 | 2.48.5-150600.12.43.1 |
| webkit2gtk4 | opensuse-leap 15.6 | 2.48.5-150600.12.43.1 |
| webkit2gtk4 | sles 15.6 | 2.48.5-150600.12.43.1 |
| webkit2gtk4 | sles 15.7 | 2.48.5-150600.12.43.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2025-6558 | Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPU | 8.8 | 0.1093 | KEVExploited |
| Patch now | CVE-2025-24201 | Chromium: CVE-2025-24201 Out of bounds write in GPU on Mac | 10.0 | 0.0385 | KEVExploited |
| High | CVE-2025-43227 | WebKit: Processing maliciously crafted web content may disclose sensitive user information | 8.8 | 0.0125 | None reported |
| High | CVE-2025-31278 | WebKit: Processing maliciously crafted web content may lead to memory corruption | 8.8 | 0.0124 | None reported |
| High | CVE-2025-31273 | webkit2gtk3-soup2: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption | 8.8 | 0.0114 | None reported |
| High | CVE-2025-43216 | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 8.8 | 0.0111 | None reported |
| High | CVE-2025-43212 | webkit2gtk3: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash | 8.8 | 0.0106 | None reported |
| High | CVE-2025-43240 | WebKit: A download's origin may be incorrectly associated | 8.8 | 0.0101 | None reported |
| High | CVE-2025-24189 | WebKit: Processing maliciously crafted web content may lead to memory corruption | 8.8 | 0.0075 | None reported |
| High | CVE-2024-54467 | WebKit: A malicious website may exfiltrate data cross-origin | 8.8 | 0.0063 | None reported |
| High | CVE-2024-44192 | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0045 | None reported |
| High | CVE-2025-43211 | WebKit: Processing web content may lead to a denial-of-service | 8.8 | 0.0042 | None reported |
| High | CVE-2025-43265 | WebKit: Processing maliciously crafted web content may disclose internal states of the app | 8.8 | 0.0034 | None reported |
| Routine | CVE-2025-43228 | gir1.2-javascriptcoregtk-4.1: The issue was addressed with improved UI | 4.3 | 0.0093 | None reported |
Showing 1 to 14 of 14
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.