ALSA-2026:25927
See a problem?- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25927.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2026:25927
- Related
- Published
- 2026-06-15T00:00:00Z
- Modified
- 2026-06-16T09:14:22.089552447Z
- Summary
- Important: webkit2gtk3 security update
- Details
-
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)
- webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)
- webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)
- webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2026:25927
- https://access.redhat.com/security/cve/CVE-2026-28847
- https://access.redhat.com/security/cve/CVE-2026-28883
- https://access.redhat.com/security/cve/CVE-2026-28901
- https://access.redhat.com/security/cve/CVE-2026-28902
- https://access.redhat.com/security/cve/CVE-2026-28903
- https://access.redhat.com/security/cve/CVE-2026-28904
- https://access.redhat.com/security/cve/CVE-2026-28905
- https://access.redhat.com/security/cve/CVE-2026-28907
- https://access.redhat.com/security/cve/CVE-2026-28942
- https://access.redhat.com/security/cve/CVE-2026-28946
- https://access.redhat.com/security/cve/CVE-2026-28947
- https://access.redhat.com/security/cve/CVE-2026-28953
- https://access.redhat.com/security/cve/CVE-2026-28955
- https://access.redhat.com/security/cve/CVE-2026-28958
- https://access.redhat.com/security/cve/CVE-2026-43658
- https://access.redhat.com/security/cve/CVE-2026-43660
- https://bugzilla.redhat.com/2471790
- https://bugzilla.redhat.com/2483955
- https://bugzilla.redhat.com/2483956
- https://bugzilla.redhat.com/2483957
- https://bugzilla.redhat.com/2483958
- https://bugzilla.redhat.com/2483959
- https://bugzilla.redhat.com/2483960
- https://bugzilla.redhat.com/2483961
- https://bugzilla.redhat.com/2483962
- https://bugzilla.redhat.com/2483963
- https://bugzilla.redhat.com/2483964
- https://bugzilla.redhat.com/2483965
- https://bugzilla.redhat.com/2483966
- https://bugzilla.redhat.com/2483967
- https://bugzilla.redhat.com/2483968
- https://bugzilla.redhat.com/2483969
- https://errata.almalinux.org/9/ALSA-2026-25927.html
Affected packages
AlmaLinux:9 / webkit2gtk3
Package
- Name
- webkit2gtk3
- Purl
- pkg:rpm/almalinux/webkit2gtk3
AlmaLinux:9 / webkit2gtk3-devel
Package
- Name
- webkit2gtk3-devel
- Purl
- pkg:rpm/almalinux/webkit2gtk3-devel
AlmaLinux:9 / webkit2gtk3-jsc
Package
- Name
- webkit2gtk3-jsc
- Purl
- pkg:rpm/almalinux/webkit2gtk3-jsc