High 2026-07-21

Webkit2gtk3 Security Update — AlmaLinux 9 (ALSA-2026:42062)

AlmaLinux 9

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872) * webkitgtk: webkitgtk: …

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
* webkitgtk: webkitgtk: …

Type:

security

Severity:

important

Release date:

2026-07-21

Description:

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  
Security Fix(es):  
  * Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)

  * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)

  * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)

  * webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)

  * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)

  * webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)

  * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)

  * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)

  * webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)

  * webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)

  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	webkit2gtk3-2.52.5-1.el9_8.aarch64.rpm	21ff4323774ea11749fc0888797338bdde74a338dea19c4e624c49a15be23d4b
aarch64	webkit2gtk3-jsc-2.52.5-1.el9_8.aarch64.rpm	58845ad163e89b2e2b0c3099de3da23b89bf074811b5454674a4ca8eb128bb58
aarch64	webkit2gtk3-jsc-devel-2.52.5-1.el9_8.aarch64.rpm	bb1c55447abb637f9ae46982b2c11a6a816fb1d3dfef1c9aa6a7709b18734215
aarch64	webkit2gtk3-devel-2.52.5-1.el9_8.aarch64.rpm	da5eee659d5066a2e3fc473d43c80fe52742812ef79373ca15d624e1a794a5c4
i686	webkit2gtk3-devel-2.52.5-1.el9_8.i686.rpm	483c5507fde5253785d8d0676788e7960506a69117c9197c993d959feb451ed5
i686	webkit2gtk3-jsc-devel-2.52.5-1.el9_8.i686.rpm	5c7519d0ce3ba910803d7a7ba3b39531733b1936bba043d68d74daaa45d2e2e0
i686	webkit2gtk3-2.52.5-1.el9_8.i686.rpm	92867645ac344be9b565a8adef038466e3a80591a5f2dd91e1a6b768b6a3d23c
i686	webkit2gtk3-jsc-2.52.5-1.el9_8.i686.rpm	b05a0d947227bbdf3f32d04b1a5c81ff85e9ea022ca6ab251c8f59825901c6d2
ppc64le	webkit2gtk3-devel-2.52.5-1.el9_8.ppc64le.rpm	1ca1583dcd3e05db760464855f23ff1849f20ea7f3512b74143d7cccb5942094
ppc64le	webkit2gtk3-jsc-2.52.5-1.el9_8.ppc64le.rpm	5996dd0aab628cf1e4965f41970325a58c3b497fb80462f7fb57c9d1281a80b4
ppc64le	webkit2gtk3-jsc-devel-2.52.5-1.el9_8.ppc64le.rpm	5c0e028f9fb47b1d3ed48eb9c4d69e172c681620ba9928be5fbcb684bdad386b
ppc64le	webkit2gtk3-2.52.5-1.el9_8.ppc64le.rpm	692a26969ef1f094ee323b6cdc4e449061f66522edec6dd1151138e096587a02
s390x	webkit2gtk3-jsc-devel-2.52.5-1.el9_8.s390x.rpm	7a7a14bb1ecf48125a26ddad1f6150f9a9a0dc1b9b7001275e9627870574052c
s390x	webkit2gtk3-2.52.5-1.el9_8.s390x.rpm	83dbc128d248288fe792f169b450e84f34adbaa3e286397ed826bc17b4c8c5bf
s390x	webkit2gtk3-devel-2.52.5-1.el9_8.s390x.rpm	d3a7497ac0007fd401caa7e0250d84d6962bc8bdf3966367cf7c8e121396fea1
s390x	webkit2gtk3-jsc-2.52.5-1.el9_8.s390x.rpm	d9d92a1c78eae9ae9a7b8b1fea26acf28cedf3b6b2eef84a1c686da4a866ed1d
x86_64	webkit2gtk3-jsc-2.52.5-1.el9_8.x86_64.rpm	0c56e4fe6434db6837a0ca6256a9ab0044e12610b14045a0a49d2e8034d22de0
x86_64	webkit2gtk3-2.52.5-1.el9_8.x86_64.rpm	630250c90dc75cdaf864e586f1048d91148e7b016ebdfc9afb689815726685cc
x86_64	webkit2gtk3-devel-2.52.5-1.el9_8.x86_64.rpm	c93a6d388d504371dba66f31d22e0c219fdf8548e58c81c427e8c4b3f26be9bd
x86_64	webkit2gtk3-jsc-devel-2.52.5-1.el9_8.x86_64.rpm	e6b73f579daa751a048099633d4f399f4e9edc7b350948846e3e6f8efc20505c

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

More Information

Security Advisories

Latest Advisories

ConfigServer Security & Firewall (CSF) 16.30-1 — cPanel & WHM Update

2026-08-07

Sitejet Builder 4.12.0-1 — cPanel & WHM Update

2026-08-07

cPanel & WHM version 138

2026-08-07

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System