Volver a los avisos de seguridad

Webkit2gtk3 Security Update — AlmaLinux 9 (ALSA-2026:42062)

This is a security release for AlmaLinux 9. The fix ships in the current release line (referenced builds: 52.5-1). Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

High
AlmaLinux 9

Comandos de corrección

EL8+ (AlmaLinux/CloudLinux/Rocky)

sudo dnf update

Lo que esto significa bajo una licencia de SharedLicense

Your SharedLicense license itself is not affected — this is a change in AlmaLinux 9 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
* webkitgtk: webkitgtk: …

Type:

security

Severity:

important

Release date:

2026-07-21

Description:

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)
* webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)
* webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)
* webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)
* webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)
* webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)
* webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)
* webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)
* webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)
* webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
aarch64 webkit2gtk3-2.52.5-1.el9_8.aarch64.rpm 21ff4323774ea11749fc0888797338bdde74a338dea19c4e624c49a15be23d4b
aarch64 webkit2gtk3-jsc-2.52.5-1.el9_8.aarch64.rpm 58845ad163e89b2e2b0c3099de3da23b89bf074811b5454674a4ca8eb128bb58
aarch64 webkit2gtk3-jsc-devel-2.52.5-1.el9_8.aarch64.rpm bb1c55447abb637f9ae46982b2c11a6a816fb1d3dfef1c9aa6a7709b18734215
aarch64 webkit2gtk3-devel-2.52.5-1.el9_8.aarch64.rpm da5eee659d5066a2e3fc473d43c80fe52742812ef79373ca15d624e1a794a5c4
i686 webkit2gtk3-devel-2.52.5-1.el9_8.i686.rpm 483c5507fde5253785d8d0676788e7960506a69117c9197c993d959feb451ed5
i686 webkit2gtk3-jsc-devel-2.52.5-1.el9_8.i686.rpm 5c7519d0ce3ba910803d7a7ba3b39531733b1936bba043d68d74daaa45d2e2e0
i686 webkit2gtk3-2.52.5-1.el9_8.i686.rpm 92867645ac344be9b565a8adef038466e3a80591a5f2dd91e1a6b768b6a3d23c
i686 webkit2gtk3-jsc-2.52.5-1.el9_8.i686.rpm b05a0d947227bbdf3f32d04b1a5c81ff85e9ea022ca6ab251c8f59825901c6d2
ppc64le webkit2gtk3-devel-2.52.5-1.el9_8.ppc64le.rpm 1ca1583dcd3e05db760464855f23ff1849f20ea7f3512b74143d7cccb5942094
ppc64le webkit2gtk3-jsc-2.52.5-1.el9_8.ppc64le.rpm 5996dd0aab628cf1e4965f41970325a58c3b497fb80462f7fb57c9d1281a80b4
ppc64le webkit2gtk3-jsc-devel-2.52.5-1.el9_8.ppc64le.rpm 5c0e028f9fb47b1d3ed48eb9c4d69e172c681620ba9928be5fbcb684bdad386b
ppc64le webkit2gtk3-2.52.5-1.el9_8.ppc64le.rpm 692a26969ef1f094ee323b6cdc4e449061f66522edec6dd1151138e096587a02
s390x webkit2gtk3-jsc-devel-2.52.5-1.el9_8.s390x.rpm 7a7a14bb1ecf48125a26ddad1f6150f9a9a0dc1b9b7001275e9627870574052c
s390x webkit2gtk3-2.52.5-1.el9_8.s390x.rpm 83dbc128d248288fe792f169b450e84f34adbaa3e286397ed826bc17b4c8c5bf
s390x webkit2gtk3-devel-2.52.5-1.el9_8.s390x.rpm d3a7497ac0007fd401caa7e0250d84d6962bc8bdf3966367cf7c8e121396fea1
s390x webkit2gtk3-jsc-2.52.5-1.el9_8.s390x.rpm d9d92a1c78eae9ae9a7b8b1fea26acf28cedf3b6b2eef84a1c686da4a866ed1d
x86_64 webkit2gtk3-jsc-2.52.5-1.el9_8.x86_64.rpm 0c56e4fe6434db6837a0ca6256a9ab0044e12610b14045a0a49d2e8034d22de0
x86_64 webkit2gtk3-2.52.5-1.el9_8.x86_64.rpm 630250c90dc75cdaf864e586f1048d91148e7b016ebdfc9afb689815726685cc
x86_64 webkit2gtk3-devel-2.52.5-1.el9_8.x86_64.rpm c93a6d388d504371dba66f31d22e0c219fdf8548e58c81c427e8c4b3f26be9bd
x86_64 webkit2gtk3-jsc-devel-2.52.5-1.el9_8.x86_64.rpm e6b73f579daa751a048099633d4f399f4e9edc7b350948846e3e6f8efc20505c

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Referencias

Avisos de seguridad

Avisos relacionados

cPanel CVE-2026-87899: Privilege Escalation

2026-09-23 00:00:00

WP Toolkit for cPanel CVE-2026-87900: Argument Injection

2026-09-23 00:00:00

Plesk CVE-2026-68492: Untrusted Search Path

2026-09-23 00:00:00

Comprueba tu sistema en busca de vulnerabilidades

Selecciona tu producto y sistema operativo para ver los comandos de corrección exactos que se aplican a ti.

Comprueba tu sistema