[ALSA-2026:42062] Important: webkit2gtk3 security update
Type:
security
Severity:
important
Release date:
2026-07-21
Description:
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699) * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712) * webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720) * webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721) * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731) * webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734) * webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 webkit2gtk3-2.52.5-1.el9_8.aarch64.rpm 21ff4323774ea11749fc0888797338bdde74a338dea19c4e624c49a15be23d4b
aarch64 webkit2gtk3-jsc-2.52.5-1.el9_8.aarch64.rpm 58845ad163e89b2e2b0c3099de3da23b89bf074811b5454674a4ca8eb128bb58
aarch64 webkit2gtk3-jsc-devel-2.52.5-1.el9_8.aarch64.rpm bb1c55447abb637f9ae46982b2c11a6a816fb1d3dfef1c9aa6a7709b18734215
aarch64 webkit2gtk3-devel-2.52.5-1.el9_8.aarch64.rpm da5eee659d5066a2e3fc473d43c80fe52742812ef79373ca15d624e1a794a5c4
i686 webkit2gtk3-devel-2.52.5-1.el9_8.i686.rpm 483c5507fde5253785d8d0676788e7960506a69117c9197c993d959feb451ed5
i686 webkit2gtk3-jsc-devel-2.52.5-1.el9_8.i686.rpm 5c7519d0ce3ba910803d7a7ba3b39531733b1936bba043d68d74daaa45d2e2e0
i686 webkit2gtk3-2.52.5-1.el9_8.i686.rpm 92867645ac344be9b565a8adef038466e3a80591a5f2dd91e1a6b768b6a3d23c
i686 webkit2gtk3-jsc-2.52.5-1.el9_8.i686.rpm b05a0d947227bbdf3f32d04b1a5c81ff85e9ea022ca6ab251c8f59825901c6d2
ppc64le webkit2gtk3-devel-2.52.5-1.el9_8.ppc64le.rpm 1ca1583dcd3e05db760464855f23ff1849f20ea7f3512b74143d7cccb5942094
ppc64le webkit2gtk3-jsc-2.52.5-1.el9_8.ppc64le.rpm 5996dd0aab628cf1e4965f41970325a58c3b497fb80462f7fb57c9d1281a80b4
ppc64le webkit2gtk3-jsc-devel-2.52.5-1.el9_8.ppc64le.rpm 5c0e028f9fb47b1d3ed48eb9c4d69e172c681620ba9928be5fbcb684bdad386b
ppc64le webkit2gtk3-2.52.5-1.el9_8.ppc64le.rpm 692a26969ef1f094ee323b6cdc4e449061f66522edec6dd1151138e096587a02
s390x webkit2gtk3-jsc-devel-2.52.5-1.el9_8.s390x.rpm 7a7a14bb1ecf48125a26ddad1f6150f9a9a0dc1b9b7001275e9627870574052c
s390x webkit2gtk3-2.52.5-1.el9_8.s390x.rpm 83dbc128d248288fe792f169b450e84f34adbaa3e286397ed826bc17b4c8c5bf
s390x webkit2gtk3-devel-2.52.5-1.el9_8.s390x.rpm d3a7497ac0007fd401caa7e0250d84d6962bc8bdf3966367cf7c8e121396fea1
s390x webkit2gtk3-jsc-2.52.5-1.el9_8.s390x.rpm d9d92a1c78eae9ae9a7b8b1fea26acf28cedf3b6b2eef84a1c686da4a866ed1d
x86_64 webkit2gtk3-jsc-2.52.5-1.el9_8.x86_64.rpm 0c56e4fe6434db6837a0ca6256a9ab0044e12610b14045a0a49d2e8034d22de0
x86_64 webkit2gtk3-2.52.5-1.el9_8.x86_64.rpm 630250c90dc75cdaf864e586f1048d91148e7b016ebdfc9afb689815726685cc
x86_64 webkit2gtk3-devel-2.52.5-1.el9_8.x86_64.rpm c93a6d388d504371dba66f31d22e0c219fdf8548e58c81c427e8c4b3f26be9bd
x86_64 webkit2gtk3-jsc-devel-2.52.5-1.el9_8.x86_64.rpm e6b73f579daa751a048099633d4f399f4e9edc7b350948846e3e6f8efc20505c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.