Summary
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325)
* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331)
* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304)
* chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247)
* chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293)
* chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | webkit2gtk3 | 0:2.54.2-0.el9_8.1 |
Vulnerabilities 6
-
Critical 9.6
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitr…
-
Critical 9.6
Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute a…
-
High 8.3
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rend…
-
High 8.3
Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rende…
-
Medium 4.7
Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside th…
-
Medium 4.3
Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origi…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2543413
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2543421
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2546829
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2546942
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2546956
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2546958
-
advisory
https://access.redhat.com/errata/RHSA-2026:91580