The Fedora Project has released a security update for WebKitGTK, specifically version 2.48.2-1 for Fedora 41. This update addresses several security vulnerabilities and improves the performance and rendering capabilities of the GTK web content engine.
Key updates include enabling CSS Overscroll Behavior by default, transitioning the threaded rendering implementation to use the Skia API for enhanced safety, and fixing issues related to device scale factor changes. Additionally, the update resolves crashes experienced during network process exits and multiple rendering issues.
The update also patches several significant security vulnerabilities, identified as CVE-2025-24223, CVE-2025-31204, CVE-2025-31205, CVE-2025-31206, CVE-2025-31215, and CVE-2025-31257, which could potentially allow malicious web content to cause memory corruption, cross-origin data exfiltration, and crashes.
For users wishing to install this update, it is available through the "dnf" package manager. Detailed instructions on how to execute the installation are provided, along with links to the Fedora Project's documentation and GPG key information for verifying package integrity.
In conclusion, this WebKitGTK update for Fedora 41 is crucial for maintaining system security and improving the web browsing experience on GTK platforms. Users are encouraged to apply the update promptly to ensure their systems are protected against the identified vulnerabilities
Key updates include enabling CSS Overscroll Behavior by default, transitioning the threaded rendering implementation to use the Skia API for enhanced safety, and fixing issues related to device scale factor changes. Additionally, the update resolves crashes experienced during network process exits and multiple rendering issues.
The update also patches several significant security vulnerabilities, identified as CVE-2025-24223, CVE-2025-31204, CVE-2025-31205, CVE-2025-31206, CVE-2025-31215, and CVE-2025-31257, which could potentially allow malicious web content to cause memory corruption, cross-origin data exfiltration, and crashes.
For users wishing to install this update, it is available through the "dnf" package manager. Detailed instructions on how to execute the installation are provided, along with links to the Fedora Project's documentation and GPG key information for verifying package integrity.
In conclusion, this WebKitGTK update for Fedora 41 is crucial for maintaining system security and improving the web browsing experience on GTK platforms. Users are encouraged to apply the update promptly to ensure their systems are protected against the identified vulnerabilities
WebKitGTK updates for Fedora 41
A security update for WebKitGTK is now available for Fedora Linux 41:
Fedora 41 Update: webkitgtk-2.48.2-1.fc41