Red Hat Product Errata RHSA-2026:57348 - Security Advisory Issued: 2026-08-20 Updated: 2026-08-20 RHSA-2026:57348 - Security Advisory Overview Updated Packages Synopsis Important: webkit2gtk3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699) webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712) webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720) webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721) webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731) webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734) webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 x86_64 Red Hat Enterprise Linux Server - AUS 8.4 x86_64 Fixes BZ - 2280382 - CVE-2024-4367 Mozilla: Arbitrary JavaScript execution in PDF.js BZ - 2500519 - CVE-2026-39872 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500520 - CVE-2026-43663 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500521 - CVE-2026-43676 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500522 - CVE-2026-43699 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500523 - CVE-2026-43701 webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox BZ - 2500524 - CVE-2026-43705 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500525 - CVE-2026-43707 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500526 - CVE-2026-43712 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500527 - CVE-2026-43713 webkitgtk: webkitgtk: Visiting a website may leak sensitive data BZ - 2500528 - CVE-2026-43715 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500529 - CVE-2026-43716 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500530 - CVE-2026-43720 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500531 - CVE-2026-43721 webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data BZ - 2500532 - CVE-2026-43725 webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox BZ - 2500533 - CVE-2026-43726 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500534 - CVE-2026-43727 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500535 - CVE-2026-43731 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500536 - CVE-2026-43732 webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information BZ - 2500537 - CVE-2026-43734 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500538 - CVE-2026-43740 webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory BZ - 2500539 - CVE-2026-43742 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500540 - CVE-2026-43745 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash CVEs CVE-2024-4367 CVE-2026-39872 CVE-2026-43663 CVE-2026-43676 CVE-2026-43699 CVE-2026-43701 CVE-2026-43705 CVE-2026-43707 CVE-2026-43712 CVE-2026-43713 CVE-2026-43715 CVE-2026-43716 CVE-2026-43720 CVE-2026-43721 CVE-2026-43725 CVE-2026-43726 CVE-2026-43727 CVE-2026-43731 CVE-2026-43732 CVE-2026-43734 CVE-2026-43740 CVE-2026-43742 CVE-2026-43745 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 SRPM webkit2gtk3-2.52.5-1.el8_4.src.rpm SHA-256: 25404300362874bd40af2f48574747d249d8db8cb9ee069a7e1c57033bfbe7c4 x86_64 webkit2gtk3-2.52.5-1.el8_4.i686.rpm SHA-256: e854ab5f82d8cb4f260a12ae3d027353b30658306bed54c95866c8dd47a245b8 webkit2gtk3-2.52.5-1.el8_4.x86_64.rpm SHA-256: 856385c925f6e46b55fde6b36037fb868cfa54178bc1cc90e91e3fab1a25b169 webkit2gtk3-debuginfo-2.52.5-1.el8_4.i686.rpm SHA-256: 7925def57d5dba105a7d84744573398b0406b77856af1a8a1a3239f54135a7a3 webkit2gtk3-debuginfo-2.52.5-1.el8_4.x86_64.rpm SHA-256: dc320e4df5f28492c322fa5cc533b4f65bb8f29951af1af3eee74df35569ee3f webkit2gtk3-debugsource-2.52.5-1.el8_4.i686.rpm SHA-256: 794cb2ed65513127e23b2687a1e4ee630743b232ab44032c399f3df488b332c5 webkit2gtk3-debugsource-2.52.5-1.el8_4.x86_64.rpm SHA-256: 7e9738bf92298000d8d0ad2fcafaf0599979dafa2a28553e68895a2a882efd57 webkit2gtk3-devel-2.52.5-1.el8_4.i686.rpm SHA-256: 597d429563bbaa43b550d011244dfaade3ba8557d195b191db2e5c6e323d96a8 webkit2gtk3-devel-2.52.5-1.el8_4.x86_64.rpm SHA-256: bb0c13373fa818fa5840bed9ec40f33b0414572ce84de82b4ee27d48119a19f2 webkit2gtk3-devel-debuginfo-2.52.5-1.el8_4.i686.rpm SHA-256: 02a2d926ed55450c19f917964db0bf6a3f32917878d2b594876e8741ced8eaa5 webkit2gtk3-devel-debuginfo-2.52.5-1.el8_4.x86_64.rpm SHA-256: 80226ff3517c0cb463d0baa8d84ac2b8c4c38e6aedfcc9483b52c59832be140d webkit2gtk3-jsc-2.52.5-1.el8_4.i686.rpm SHA-256: ac69442336aa0d6ab8db4fad8bc40c45745e9b73c46d7d58c66d6387374255fd webkit2gtk3-jsc-2.52.5-1.el8_4.x86_64.rpm SHA-256: cc6342573bedf02c9c6f7a6e242efd9a3940b8d22b4966e87190b3f4de8d14f1 webkit2gtk3-jsc-debuginfo-2.52.5-1.el8_4.i686.rpm SHA-256: 18259025212898812d88a03810d1791cc4ac4dc7a9c9503f0753881a696e7ca7 webkit2gtk3-jsc-debuginfo-2.52.5-1.el8_4.x86_64.rpm SHA-256: a199a47ad50ede83a6ac08dc2921e0b1969f0f753c4a35faddf82f3e398c1108 webkit2gtk3-jsc-devel-2.52.5-1.el8_4.i686.rpm SHA-256: 509786c494e55767562b48969f4411b83f5e66ec9422264a9fb32a9960ecba52 webkit2gtk3-jsc-devel-2.52.5-1.el8_4.x86_64.rpm SHA-256: 085c36c6ec3e48f9c2086479a3744e1d7afe7deb0d1a4462cd4ad19927374a2e webkit2gtk3-jsc-devel-debuginfo-2.52.5-1.el8_4.i686.rpm SHA-256: b9158d408231b2c2a9ec95bf86a9432592309c747cfb9a5c5b8843d0b7e7d936 webkit2gtk3-jsc-devel-debuginfo-2.52.5-1.el8_4.x86_64.rpm SHA-256: 8d540bc1fdd927fe2030a70f4b26810216a1440cf1dd3bde9ed701c4c69a5dc6 Red Hat Enterprise Linux Server - AUS 8.4 SRPM webkit2gtk3-2.52.5-1.el8_4.src.rpm SHA-256: 25404300362874bd40af2f48574747d249d8db8cb9ee069a7e1c57033bfbe7c4 x86_64 webkit2gtk3-2.52.5-1.el8_4.i686.rpm SHA-256: e854ab5f82d8cb4f260a12ae3d027353b30658306bed54c95866c8dd47a245b8 webkit2gtk3-2.52.5-1.el8_4.x86_64.rpm SHA-256: 856385c925f6e46b55fde6b36037fb868cfa54178bc1cc90e91e3fab1a25b169 webkit2gtk3-debuginfo-2.52.5-1.el8_4.i686.rpm SHA-256: 7925def57d5dba105a7d84744573398b0406b77856af1a8a1a3239f54135a7a3 webkit2gtk3-debuginfo-2.52.5-1.el8_4.x86_64.rpm SHA-256: dc320e4df5f28492c322fa5cc533b4f65bb8f29951af1af3eee74df35569ee3f