Red Hat Product Errata RHSA-2026:58550 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:58550 - Security Advisory Overview Updated Packages Synopsis Important: webkit2gtk3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699) webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712) webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720) webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721) webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731) webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734) webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745) webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2280382 - CVE-2024-4367 Mozilla: Arbitrary JavaScript execution in PDF.js BZ - 2500519 - CVE-2026-39872 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500520 - CVE-2026-43663 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500521 - CVE-2026-43676 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500522 - CVE-2026-43699 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500523 - CVE-2026-43701 webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox BZ - 2500524 - CVE-2026-43705 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500525 - CVE-2026-43707 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500526 - CVE-2026-43712 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500527 - CVE-2026-43713 webkitgtk: webkitgtk: Visiting a website may leak sensitive data BZ - 2500528 - CVE-2026-43715 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500529 - CVE-2026-43716 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500530 - CVE-2026-43720 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500531 - CVE-2026-43721 webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data BZ - 2500532 - CVE-2026-43725 webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox BZ - 2500533 - CVE-2026-43726 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500534 - CVE-2026-43727 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500535 - CVE-2026-43731 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500536 - CVE-2026-43732 webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information BZ - 2500537 - CVE-2026-43734 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500538 - CVE-2026-43740 webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory BZ - 2500539 - CVE-2026-43742 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500540 - CVE-2026-43745 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2520320 - CVE-2026-64787 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination CVEs CVE-2024-4367 CVE-2026-39872 CVE-2026-43663 CVE-2026-43676 CVE-2026-43699 CVE-2026-43701 CVE-2026-43705 CVE-2026-43707 CVE-2026-43712 CVE-2026-43713 CVE-2026-43715 CVE-2026-43716 CVE-2026-43720 CVE-2026-43721 CVE-2026-43725 CVE-2026-43726 CVE-2026-43727 CVE-2026-43731 CVE-2026-43732 CVE-2026-43734 CVE-2026-43740 CVE-2026-43742 CVE-2026-43745 CVE-2026-64787 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM webkit2gtk3-2.52.5-1.el9_2.src.rpm SHA-256: 413c53cc0d1912427bbe879b05b0f228d0d7d210209738b5a7c36a467c2b4472 x86_64 webkit2gtk3-2.52.5-1.el9_2.i686.rpm SHA-256: f1fa094cd75cf2154162583a3adc85b32cf14ae348050dda04bb28948b133b40 webkit2gtk3-2.52.5-1.el9_2.x86_64.rpm SHA-256: d8a8c02e273420dcc4c7b93b469ac0fe6ddebf3448769151e141a6124c388788 webkit2gtk3-debuginfo-2.52.5-1.el9_2.i686.rpm SHA-256: 4baa7a4fc47b6b10c0ee91da508931eb0cb8447f647c74da99c081552d1fe224 webkit2gtk3-debuginfo-2.52.5-1.el9_2.x86_64.rpm SHA-256: f5726e2b73d5fd8bfb782e2bc3e3def73795ffb2b5427606486a8a4774553da2 webkit2gtk3-debugsource-2.52.5-1.el9_2.i686.rpm SHA-256: 776f1c6c564b8ae9f7b1c3668ae290d5f16053484a50b8616e4fdaaac3ca9f45 webkit2gtk3-debugsource-2.52.5-1.el9_2.x86_64.rpm SHA-256: bcde9ae5034b5e9a58a31bd31fed8911c262969ace0c0c5731ef584783041eaf webkit2gtk3-devel-2.52.5-1.el9_2.i686.rpm SHA-256: 06d1eebeabfbe0d742123db4cda2a878260e2c57f044e5d902a4bec6f1b0717c webkit2gtk3-devel-2.52.5-1.el9_2.x86_64.rpm SHA-256: 0a400310997407663eea27e941b5c3362fa8d8198c72ab31c3efe2c6426bd3ab webkit2gtk3-devel-debuginfo-2.52.5-1.el9_2.i686.rpm SHA-256: 17dbaedfa169c097868c297b73a046ea6815a5aa91afc519f42743863c928609 webkit2gtk3-devel-debuginfo-2.52.5-1.el9_2.x86_64.rpm SHA-256: 775b6b8d09ef990bb610d4a23c2e019c3c88127718df992dfa4710f3d3228ca9 webkit2gtk3-jsc-2.52.5-1.el9_2.i686.rpm SHA-256: abf9f86493bcc4ab67653821511008cbd0f09944af9e7b548686ca2419774c8f webkit2gtk3-jsc-2.52.5-1.el9_2.x86_64.rpm SHA-256: 3a9671f2af3fa26b3feb4698e9fe74b293f308d72ae176d1350a7ae9ba579519 webkit2gtk3-jsc-debuginfo-2.52.5-1.el9_2.i686.rpm SHA-256: df0e4eda270b2781476da95e3f5aecaee9f3f2d4608ede131d1f3b67fcf46f2c webkit2gtk3-jsc-debuginfo-2.52.5-1.el9_2.x86_64.rpm SHA-256: 09317ff5206f534ea03f0ee1bb4c51ef8594bf9c45d0264d8bfd4be7de52f83d webkit2gtk3-jsc-devel-2.52.5-1.el9_2.i686.rpm SHA-256: 61fe2ba836616e726fe90a51b5f0480c17a71180640d09982c8dfbfbea5f188c webkit2gtk3-jsc-devel-2.52.5-1.el9_2.x86_64.rpm SHA-256: c15c915ae8c407e858ed04b776992e22819c93541419b3eea803e9df86719f2c webkit2gtk3-jsc-devel-debuginfo-2.52.5-1.el9_2.i686.rpm SHA-256: af876e63848d4f836c5089549ada53530d2fdee65244141d0e18f820624f1f94 webkit2gtk3-jsc-devel-debuginfo-2.52.5-1.el9_2.x86_64.rpm SHA-256: d6