RHSA-2026:13845 — Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 27

Release	Package	Fixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3-debugsource	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3-devel	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3-devel-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3-jsc	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3-jsc-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3-jsc-devel	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3-debugsource	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3-devel	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3-devel-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3-jsc	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3-jsc-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3-jsc-devel	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3-debugsource	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3-devel	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3-devel-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3-jsc	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3-jsc-debuginfo	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3-jsc-devel	0:2.52.3-1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.52.3-1.el8_6

Vulnerabilities 18

High 7.5

CVE-2026-20652

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Feb 11, 2026
Medium 6.5

CVE-2025-43213

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 6.5

CVE-2025-43214

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 6.5

CVE-2025-43457

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 6.5

CVE-2025-43511

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 12, 2025
Medium 6.5

CVE-2026-20636

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, ma…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Feb 11, 2026
Medium 6.5

CVE-2026-20644

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Feb 11, 2026
Medium 6.5

CVE-2026-20665

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 6.5

CVE-2026-28857

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 5.5

CVE-2026-20608

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 1…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Feb 11, 2026
Medium 5.4

CVE-2026-20643 Public exploit

A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Backgro…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 17, 2026
Medium 4.3

CVE-2025-46299

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 9, 2026
Medium 4.3

CVE-2026-20635

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Feb 11, 2026
Medium 4.3

CVE-2026-20664

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-20676

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Feb 11, 2026
Medium 4.3

CVE-2026-20691

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-28859

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-28871

A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Mar 25, 2026

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448781
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448782
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448786
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448787
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448788
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448789
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448790
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448791
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448792
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448793
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448794
report
https://bugzilla.redhat.com/show_bug.cgi?id=2453000
report
https://bugzilla.redhat.com/show_bug.cgi?id=2453001
report
https://bugzilla.redhat.com/show_bug.cgi?id=2453002
report
https://bugzilla.redhat.com/show_bug.cgi?id=2453003
report
https://bugzilla.redhat.com/show_bug.cgi?id=2453004
report
https://bugzilla.redhat.com/show_bug.cgi?id=2453006
report
https://bugzilla.redhat.com/show_bug.cgi?id=2453008
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13845.json
report
https://access.redhat.com/security/cve/CVE-2025-43213
advisory
https://www.cve.org/CVERecord?id=CVE-2025-43213
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43213
article
https://webkitgtk.org/security/WSA-2026-0001.html
report
https://access.redhat.com/security/cve/CVE-2025-43214
advisory
https://www.cve.org/CVERecord?id=CVE-2025-43214
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43214
report
https://access.redhat.com/security/cve/CVE-2025-43457
advisory
https://www.cve.org/CVERecord?id=CVE-2025-43457
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43457
report
https://access.redhat.com/security/cve/CVE-2025-43511
advisory
https://www.cve.org/CVERecord?id=CVE-2025-43511
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43511
report
https://access.redhat.com/security/cve/CVE-2025-46299
advisory
https://www.cve.org/CVERecord?id=CVE-2025-46299
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-46299
report
https://access.redhat.com/security/cve/CVE-2026-20608
advisory
https://www.cve.org/CVERecord?id=CVE-2026-20608
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-20608

Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 27

Vulnerabilities 18

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 an…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, ma…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 1…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 1…

A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Backgro…

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.…

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and i…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS…

References