Skip to content
OpenAdvisories
High ALSA-2026:91636 14 CVEs

Important: webkit2gtk3 security update

Published Oct 28, 2026 · Updated Nov 4, 2026

Ecosystem: AlmaLinux

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325)
* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331)
* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304)
* chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247)
* chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293)
* chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 8 webkit2gtk3 2.54.2-1.el8_10
AlmaLinux · 8 webkit2gtk3-devel 2.54.2-1.el8_10
AlmaLinux · 8 webkit2gtk3-jsc 2.54.2-1.el8_10
AlmaLinux · 8 webkit2gtk3-jsc-devel 2.54.2-1.el8_10

Vulnerabilities 14

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-106245
  • report
    https://access.redhat.com/security/cve/CVE-2026-106247
  • report
    https://access.redhat.com/security/cve/CVE-2026-106293
  • report
    https://access.redhat.com/security/cve/CVE-2026-106304
  • report
    https://access.redhat.com/security/cve/CVE-2026-95325
  • report
    https://access.redhat.com/security/cve/CVE-2026-95331
  • report
    https://bugzilla.redhat.com/2543413
  • report
    https://bugzilla.redhat.com/2543421
  • report
    https://bugzilla.redhat.com/2546829
  • report
    https://bugzilla.redhat.com/2546942
  • report
    https://bugzilla.redhat.com/2546956
  • report
    https://bugzilla.redhat.com/2546958
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-91636.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-113140.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-113143.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-113200.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-113234.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-113250.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-113273.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-113315.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-118322.html