{"id":"RHSA-2026:25927","summary":"Red Hat Security Advisory: webkit2gtk3 security update","modified":"2026-06-24T10:07:32Z","published":"2026-06-16T10:06:24Z","upstream":["CVE-2026-28847","CVE-2026-28883","CVE-2026-28901","CVE-2026-28902","CVE-2026-28903","CVE-2026-28904","CVE-2026-28905","CVE-2026-28907","CVE-2026-28942","CVE-2026-28946","CVE-2026-28947","CVE-2026-28953","CVE-2026-28955","CVE-2026-28958","CVE-2026-43658","CVE-2026-43660"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25927"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2471790"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483955"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483956"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483957"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483958"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483959"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483960"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483961"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483962"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483963"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483964"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483965"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483966"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483967"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483968"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483969"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25927.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28847"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28847"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28847"},{"type":"ARTICLE","url":"https://webkitgtk.org/security/WSA-2026-0003.html"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28883"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28883"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28883"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28901"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28901"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28901"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28902"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28902"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28902"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28903"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28903"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28903"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28904"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28904"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28904"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28905"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28905"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28905"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28907"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28907"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28907"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28942"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28942"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28942"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28946"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28946"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28946"},{"type":"ARTICLE","url":"https://support.apple.com/en-us/127115"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28947"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28947"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28947"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28953"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28953"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28953"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28955"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28955"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28955"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-28958"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-28958"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28958"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-43658"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-43658"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43658"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-43660"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-43660"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43660"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}},{"package":{"name":"webkit2gtk3-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}},{"package":{"name":"webkit2gtk3-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}},{"package":{"name":"webkit2gtk3-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-devel-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}},{"package":{"name":"webkit2gtk3-jsc-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}},{"package":{"name":"webkit2gtk3-jsc-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:25927.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}