Skip to content
OpenAdvisories
High RLSA-2026:95194 17 CVEs

Important: webkit2gtk3 security update

Published Nov 5, 2026 · Updated Nov 5, 2026

Ecosystem: Rocky Linux

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)

* chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)

* chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)

* chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)

* chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)

* chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)

* chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)

* chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)

* chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)

* chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)

* chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)

* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)

* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)

* chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)

* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)

* chromium-browser: skia: Use after free in Skia (CVE-2026-119271)

* chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 webkit2gtk3 0:2.54.2-0.el9_8.2

Vulnerabilities 17

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2528197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2534512
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2534705
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2534759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2537950
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543588
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2545277
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2546915
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2547009
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2556522
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2562464
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2562477
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2562479
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2562486
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2562496
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2563744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2563759
  • advisory
    https://access.redhat.com/errata/RHSA-2026:95194