Red Hat Product Errata RHSA-2026:59326 - Security Advisory Issued: 2026-08-25 Updated: 2026-08-25 RHSA-2026:59326 - Security Advisory Overview Updated Packages Synopsis Important: webkit2gtk3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699) webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712) webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720) webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721) webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727) webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731) webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734) webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742) webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745) webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2280382 - CVE-2024-4367 Mozilla: Arbitrary JavaScript execution in PDF.js BZ - 2500519 - CVE-2026-39872 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500520 - CVE-2026-43663 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500521 - CVE-2026-43676 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500522 - CVE-2026-43699 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500523 - CVE-2026-43701 webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox BZ - 2500524 - CVE-2026-43705 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500525 - CVE-2026-43707 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500526 - CVE-2026-43712 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500527 - CVE-2026-43713 webkitgtk: webkitgtk: Visiting a website may leak sensitive data BZ - 2500528 - CVE-2026-43715 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500529 - CVE-2026-43716 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500530 - CVE-2026-43720 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500531 - CVE-2026-43721 webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data BZ - 2500532 - CVE-2026-43725 webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox BZ - 2500533 - CVE-2026-43726 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500534 - CVE-2026-43727 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500535 - CVE-2026-43731 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption BZ - 2500536 - CVE-2026-43732 webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information BZ - 2500537 - CVE-2026-43734 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500538 - CVE-2026-43740 webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory BZ - 2500539 - CVE-2026-43742 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2500540 - CVE-2026-43745 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash BZ - 2520320 - CVE-2026-64787 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination CVEs CVE-2024-4367 CVE-2026-39872 CVE-2026-43663 CVE-2026-43676 CVE-2026-43699 CVE-2026-43701 CVE-2026-43705 CVE-2026-43707 CVE-2026-43712 CVE-2026-43713 CVE-2026-43715 CVE-2026-43716 CVE-2026-43720 CVE-2026-43721 CVE-2026-43725 CVE-2026-43726 CVE-2026-43727 CVE-2026-43731 CVE-2026-43732 CVE-2026-43734 CVE-2026-43740 CVE-2026-43742 CVE-2026-43745 CVE-2026-64787 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM webkit2gtk3-2.52.5-1.el8_8.src.rpm SHA-256: 58e32290fd143ec855336eb59ecefdd7ab4b6102ebf6838c686e53f6e224ca71 x86_64 webkit2gtk3-2.52.5-1.el8_8.i686.rpm SHA-256: 5118dd8c93c63de3423d7db7d49a6fd791fe5fc2968815c06d484247125128ee webkit2gtk3-2.52.5-1.el8_8.x86_64.rpm SHA-256: e4a626d898cb5758be5bd22e6c15cf4d08f6e182c88bcff809a561399d9922a6 webkit2gtk3-debuginfo-2.52.5-1.el8_8.i686.rpm SHA-256: 52b1166da8fe67015e281f35c338664b63932c29bd1faa4bac3b272b9c7e7613 webkit2gtk3-debuginfo-2.52.5-1.el8_8.x86_64.rpm SHA-256: 6110613f12f5d9a528d2e407eed881aa12429be70bac14b22e40d0de71e7c47e webkit2gtk3-debugsource-2.52.5-1.el8_8.i686.rpm SHA-256: b8de120daf77be065de1151be376d90eebe4a400ed4f49fd9a0d3617b8eee9dc webkit2gtk3-debugsource-2.52.5-1.el8_8.x86_64.rpm SHA-256: 4d3812d8005213f44a61697e079ef7e8842af1e0752d63dd0e778950338f4f1f webkit2gtk3-devel-2.52.5-1.el8_8.i686.rpm SHA-256: 420ab6c202b6be38f1f1c0de3e5d51ef91934342952541e306e37abb54c1ef73 webkit2gtk3-devel-2.52.5-1.el8_8.x86_64.rpm SHA-256: 07e68011e749974b5c22f3c9583f943ab159e6ebbb5272aebf16e6408c06d5e7 webkit2gtk3-devel-debuginfo-2.52.5-1.el8_8.i686.rpm SHA-256: 2cb1de938993125b1804cc5384ecf8fe50a78e82afc3e5683779007881cb5c68 webkit2gtk3-devel-debuginfo-2.52.5-1.el8_8.x86_64.rpm SHA-256: 3db923e688f8c16ccead302bfe233b51f56b826a9518a65e2df4c8066ac464bc webkit2gtk3-jsc-2.52.5-1.el8_8.i686.rpm SHA-256: 854977d4211f72c615d625d1d16c0d7af45df546dcd609f55397414dacb1eb54 webkit2gtk3-jsc-2.52.5-1.el8_8.x86_64.rpm SHA-256: 4f1f523cd5aa1b9984460c0c5e24b8f935b8a64fab2bbb6fed81029fc3c12525 webkit2gtk3-jsc-debuginfo-2.52.5-1.el8_8.i686.rpm SHA-256: 4a046e3788976f044e98532a427ec6e86293145bc52f454afb394f20fef88f9e webkit2gtk3-jsc-debuginfo-2.52.5-1.el8_8.x86_64.rpm SHA-256: 8b12273a3e36554e523b4df332a02e11e1688721c8ca0de30dc7ae668a2180fd webkit2gtk3-jsc-devel-2.52.5-1.el8_8.i686.rpm SHA-256: ad1bcc4b9f8309186db55addfa3ea7cdd9e8853f69158d781bcf611115ae1fa7 webkit2gtk3-jsc-devel-2.52.5-1.el8_8.x86_64.rpm SHA-256: 98a8f28d79a8079feb94423ce23e3e9f91c4253fa4a43bcb3a0c031d84e70afc webkit2gtk3-jsc-devel-debuginfo-2.52.5-1.el8_8.i686.rpm SHA-256: 6f342cb7636e94a7290d8d4ee3a8e34cd3e49a113aaab84106367b95af1032db webkit2gtk3-jsc-devel-debuginfo-2.52.5-1.el8_8.x86_64.rpm SHA-256: 87c0ad9ab8e835f8e9dab90111ba51ce908100b5df3879370eb58debac5f1eca Red Hat Enterprise Linux Server - TUS 8.8 SRPM webkit2gtk3-2.52.5-1.el8_8.src.rpm SHA-256: 58e32290fd143ec855336eb59ecefdd7ab4b6102ebf6838c686e53f6e224ca71 x86_64 webkit2gtk3-2.52.5-1.el8_8.i686.rpm SHA