Skip to content
OpenAdvisories
High ALSA-2026:96080 18 CVEs

Important: webkit2gtk3 security update

Published Nov 9, 2026 · Updated Nov 9, 2026

Ecosystem: AlmaLinux

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
* chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
* chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
* chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
* chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
* chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
* chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
* chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
* chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
* chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
* chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
* chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
* chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
* chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 8 webkit2gtk3 2.54.2-2.el8_10
AlmaLinux · 8 webkit2gtk3-devel 2.54.2-2.el8_10
AlmaLinux · 8 webkit2gtk3-jsc 2.54.2-2.el8_10
AlmaLinux · 8 webkit2gtk3-jsc-devel 2.54.2-2.el8_10

Vulnerabilities 18

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-102325
  • report
    https://access.redhat.com/security/cve/CVE-2026-103629
  • report
    https://access.redhat.com/security/cve/CVE-2026-106379
  • report
    https://access.redhat.com/security/cve/CVE-2026-106399
  • report
    https://access.redhat.com/security/cve/CVE-2026-113106
  • report
    https://access.redhat.com/security/cve/CVE-2026-118319
  • report
    https://access.redhat.com/security/cve/CVE-2026-118340
  • report
    https://access.redhat.com/security/cve/CVE-2026-118348
  • report
    https://access.redhat.com/security/cve/CVE-2026-118351
  • report
    https://access.redhat.com/security/cve/CVE-2026-118354
  • report
    https://access.redhat.com/security/cve/CVE-2026-119261
  • report
    https://access.redhat.com/security/cve/CVE-2026-119271
  • report
    https://access.redhat.com/security/cve/CVE-2026-84359
  • report
    https://access.redhat.com/security/cve/CVE-2026-85049
  • report
    https://access.redhat.com/security/cve/CVE-2026-91733
  • report
    https://access.redhat.com/security/cve/CVE-2026-91740
  • report
    https://access.redhat.com/security/cve/CVE-2026-91747
  • report
    https://access.redhat.com/security/cve/CVE-2026-93387
  • report
    https://bugzilla.redhat.com/2527168
  • report
    https://bugzilla.redhat.com/2528197
  • report
    https://bugzilla.redhat.com/2534512
  • report
    https://bugzilla.redhat.com/2534705
  • report
    https://bugzilla.redhat.com/2534759
  • report
    https://bugzilla.redhat.com/2537950
  • report
    https://bugzilla.redhat.com/2543588
  • report
    https://bugzilla.redhat.com/2545277
  • report
    https://bugzilla.redhat.com/2546915
  • report
    https://bugzilla.redhat.com/2547009
  • report
    https://bugzilla.redhat.com/2556522
  • report
    https://bugzilla.redhat.com/2562464
  • report
    https://bugzilla.redhat.com/2562477
  • report
    https://bugzilla.redhat.com/2562479
  • report
    https://bugzilla.redhat.com/2562486
  • report
    https://bugzilla.redhat.com/2562496
  • report
    https://bugzilla.redhat.com/2563744
  • report
    https://bugzilla.redhat.com/2563759
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-96080.html