WebKitGTK and WPE WebKit: correction on CVE-2025-6558
A security notice published on September 30, 2026 clarifies that CVE-2025-6558 was already fixed in WebKitGTK 2.48.5 and WPE WebKit 2.48.5.
Source: Correção: comunicado de segurança do WebKitGTK e WPE WebKit WSA-2026-0006 (seclists.org). Text prepared with AI from this source.
What happened and what to do
In a September 30, 2026 notice, the WebKitGTK and WPE WebKit security publication corrected an earlier statement: CVE-2025-6558 had already been fixed in version 2.48.5 of both projects, as stated in advisory WSA-2025-0005.
The practical step for a company is to identify systems and applications that include these components, check their installed versions, and prioritize updates where needed. An automated inventory and a process for tracking advisories can help confirm exposure and record the actions taken.
How the consultancy can help
Wendelmaques can diagnose where WebKitGTK and WPE WebKit are used, assess exposure to CVE-2025-6558, and scope an implementation for inventory, updates, and security advisory monitoring.
Next step
Send a short description of your systems and needs to receive a scoped proposal for diagnosis, implementation, and operation.
Let's assess your project
I reply with scope and a proposal.