diff --git a/webkitgtk-2.48.3.tar.xz.asc b/webkitgtk-2.48.3.tar.xz.asc
deleted file mode 100644
index 663f521a9128425ba055010d7d2c341fcac46485..0000000000000000000000000000000000000000
--- a/webkitgtk-2.48.3.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmg26CoACgkQbBAJtpOX
-U5N7Ng/9HAO3gM/ND9M8WW5/OChxZCZ7Xe88UBDd3ncNeDvIEsq/A3WeVId7yXpr
-ta1ynsZM3ws/3zaEWNIXHoCDgDXeca0tYCiJN0VkFxXZqDpbgM8IaEZbF0HibdJA
-/lX4YyF5mTvM1h0lTrdHpDHUxdqKRRNKX5VdlDdRSZyNAkJsP+ryeGudUW62MvP4
-VBXvK2ZSLdBFTY+ddc02MOaGKg6ToVo2PMQtDMJd4ujjQZ+F2H66Cbp4lthdx8JA
-skcfHbVjsqLsUwBPtmYIEueIYn0x8mwyxS9ZIkVtsC2sMS9KyLOv5Tzig7VDaGJy
-YcrVWUWc5OSKa23QZrCWqIkYyhlTGlhmcVHgO3C9mXjmAt8EGycrSW4HWFMeq6d6
-pz7otK0ZGWqaJVybpJcJ4QtLn5i+qf4wEIotQIBwOnb3EZiJ4aKpy5B+auS9q+xl
-xpHP7eEl8r+R0CywwWYHFVRJn22jYSzcD5rF8lp3B4vj2Pn8sWN95ineUHICp9um
-8Z4DRDjhwmOgtg4Fsnp0ZOLCqsYua7psJQ24RZ8MTxzReGbX7kOlE9l2IvsPoiR/
-9ENPaYChpeChaIlv1RsyvX785wl8mFxZLrxGG3JXf0kcDLd5SQ1xv2W0n4zqrzvO
-zj2Yozkv/BdXPXiWuhCIF69qIlgxs2UM6f8AJfJ5/StDoPpY2aQ=
-=3Phy
------END PGP SIGNATURE-----
diff --git a/webkitgtk-2.48.3.tar.xz b/webkitgtk-2.48.5.tar.xz
similarity index 78%
rename from webkitgtk-2.48.3.tar.xz
rename to webkitgtk-2.48.5.tar.xz
index a8678c6ede58fe620af6ca3ca1ad466fb154d218..045a75f993c007750e03063791dc9906dec6ef0b 100644
Binary files a/webkitgtk-2.48.3.tar.xz and b/webkitgtk-2.48.5.tar.xz differ
diff --git a/webkitgtk-2.48.5.tar.xz.asc b/webkitgtk-2.48.5.tar.xz.asc
new file mode 100644
index 0000000000000000000000000000000000000000..f7337db2dd7a381c32c313d13ecca148f6b7e5ef
--- /dev/null
+++ b/webkitgtk-2.48.5.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=KRFp
+-----END PGP SIGNATURE-----
diff --git a/webkitgtk.spec b/webkitgtk.spec
index b916f83061c58fc32c37130f025a5ee49a2ba66c..16256bd07cc58bf7327e7af5173fb65b23a6af39 100644
--- a/webkitgtk.spec
+++ b/webkitgtk.spec
@@ -16,7 +16,7 @@
 %global with_gamepad 0
 
 Name:           webkitgtk
-Version:        2.48.3
+Version:        2.48.5
 Release:        %{anolis_release}%{?dist}
 Summary:        GTK web content engine library
 
@@ -455,6 +455,11 @@ export NINJA_STATUS="[2/2][%f/%t %es] "
 %endif
 
 %changelog
+* Tue Sep 23 2025 wh02252983 <wh02252983@alibaba-inc.com> - 2.48.5-1
+- update to 2.48.5 to fix CVE-2025-31273 CVE-2025-31278 CVE-2025-43212
+- CVE-2025-43216 CVE-2025-6558 CVE-2025-43211 CVE-2025-43227 CVE-2025-43228
+- CVE-2025-43240 CVE-2025-43265
+
 * Thu Jul 31 2025 tomcruiseqi <tomcruiseqi@inspur.com> - 2.48.3-1
 - Update to 2.48.3 to fix CVE-2024-54658 CVE-2024-40794 CVE-2024-27856