Opened 7 months ago

Closed 7 months ago

#22946 closed enhancement (fixed)

webkitgtk-2.52.0

Reported by: Bruce Dubbs Owned by: zeckma
Priority: high Milestone: 13.1
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description (last modified by Xi Ruoyao)

New minor version.

Change History (11)

comment:1 by Xi Ruoyao, 7 months ago

Milestone: 13.1 → 99-Waiting
Summary: WebKitGTK 2.50.6 → WebKitGTK 2.50.6 (wait for 2.52)

It should be easier to just wait for the GNOME 50 package.

comment:2 by Xi Ruoyao, 7 months ago

Milestone: 99-Waiting → gnome-50

comment:3 by Xi Ruoyao, 7 months ago

Description: modified (diff)
Summary: WebKitGTK 2.50.6 (wait for 2.52) → WebKitGTK 2.52.0

Now 2.52.0.

comment:4 by Joe Locash, 7 months ago

Priority: normal → elevated

7 CVE's were fixed in 2.50.6 and 1 in 2.52.0: ​https://webkitgtk.org/security/WSA-2026-0001.html

comment:5 by Bruce Dubbs, 7 months ago

Milestone: gnome-50 → 13.1
Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:6 by zeckma, 7 months ago

Owner: changed from Bruce Dubbs to zeckma
Status: assigned → new

Due to issues Bruce experienced when trying to run Evolution and Epiphany as a result of the WebKitGTK upgrade which we suppose is an Xorg in /opt issue, I'll take over on this ticket.

comment:7 by zeckma, 7 months ago

Status: new → assigned

comment:8 by zeckma, 7 months ago

Fixed at 5f70ea93e8deaab23f451e9bf87816f915798c15. Leaving open for SA.

comment:9 by zeckma, 7 months ago

Priority: elevated → high

Security fixes

  • CVE-2025-43457 (Medium): Use-after-free
  • CVE-2025-46299 (Medium): Internal app state disclosure
  • CVE-2026-20608 (Medium): Unexpected process crash
  • CVE-2026-20635 (Medium): Unexpected process crash
  • CVE-2026-20636 (Medium): Unexpected process crash
  • CVE-2026-20644 (Medium): Unexpected process crash
  • CVE-2026-20652 (High): Remote denial of service
  • CVE-2026-20676 (Medium): User tracking

comment:10 by zeckma, 7 months ago

Summary: WebKitGTK 2.52.0 → webkitgtk-2.52.0

comment:11 by zeckma, 7 months ago

Resolution: → fixed
Status: assigned → closed

SA-13.0-015 issued.

Note: See TracTickets for help on using tickets.