Red Hat Product Security issued an important security advisory (RHSA-2025:0279) for webkit2gtk3 in Red Hat Enterprise Linux 8.8 Extended Update Support. The advisory addresses four vulnerabilities where processing maliciously crafted web content can cause unexpected process crashes (CVE-2024-54479, CVE-2024-54502, CVE-2024-54508) or memory corruption (CVE-2024-54505). These vulnerabilities affect the WebKitGTK port of the WebKit rendering engine to the GTK platform. The advisory provides updated packages (webkit2gtk3-2.46.5-1.el8_8) that fix these issues. No CVSS scores are provided in the advisory, but the impact is rated as important by Red Hat.

Exploitation of these vulnerabilities may cause affected processes to crash unexpectedly or suffer memory corruption when processing malicious web content. This can lead to denial of service or potentially other impacts depending on the context in which webkit2gtk3 is used. No known exploits in the wild have been reported at the time of the advisory.

Red Hat has released updated packages for webkit2gtk3 version 2.46.5-1.el8_8 that address these vulnerabilities. Users of Red Hat Enterprise Linux 8.8 Extended Update Support should apply the security update as described in Red Hat advisory RHSA-2025:0279. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. Patch status is confirmed as available and official fixes have been released.