ALSA-2026:95194
- Source
- https://errata.almalinux.org/9/ALSA-2026-95194.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:95194.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2026:95194
- Upstream
CVE (17)
- CVE-2026-102325
- CVE-2026-103629
- CVE-2026-106379
- CVE-2026-106399
- CVE-2026-113106
- CVE-2026-118319
- CVE-2026-118340
- CVE-2026-118348
- CVE-2026-118351
- CVE-2026-118354
- CVE-2026-119261
- CVE-2026-119271
- CVE-2026-85049
- CVE-2026-91733
- CVE-2026-91740
- CVE-2026-91747
- CVE-2026-93387
- Related
- Published
- 2026-11-04T00:00:00Z
- Modified
- 2026-11-05T00:00:02Z
- Summary
- Important: webkit2gtk3 security update
- Details
-
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
- chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
- chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
- chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
- chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
- chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
- chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
- chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
- chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
- chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2026:95194
- https://access.redhat.com/security/cve/CVE-2026-102325
- https://access.redhat.com/security/cve/CVE-2026-103629
- https://access.redhat.com/security/cve/CVE-2026-106379
- https://access.redhat.com/security/cve/CVE-2026-106399
- https://access.redhat.com/security/cve/CVE-2026-113106
- https://access.redhat.com/security/cve/CVE-2026-118319
- https://access.redhat.com/security/cve/CVE-2026-118340
- https://access.redhat.com/security/cve/CVE-2026-118348
- https://access.redhat.com/security/cve/CVE-2026-118351
- https://access.redhat.com/security/cve/CVE-2026-118354
- https://access.redhat.com/security/cve/CVE-2026-119261
- https://access.redhat.com/security/cve/CVE-2026-119271
- https://access.redhat.com/security/cve/CVE-2026-85049
- https://access.redhat.com/security/cve/CVE-2026-91733
- https://access.redhat.com/security/cve/CVE-2026-91740
- https://access.redhat.com/security/cve/CVE-2026-91747
- https://access.redhat.com/security/cve/CVE-2026-93387
- https://bugzilla.redhat.com/2528197
- https://bugzilla.redhat.com/2534512
- https://bugzilla.redhat.com/2534705
- https://bugzilla.redhat.com/2534759
- https://bugzilla.redhat.com/2537950
- https://bugzilla.redhat.com/2543588
- https://bugzilla.redhat.com/2545277
- https://bugzilla.redhat.com/2546915
- https://bugzilla.redhat.com/2547009
- https://bugzilla.redhat.com/2556522
- https://bugzilla.redhat.com/2562464
- https://bugzilla.redhat.com/2562477
- https://bugzilla.redhat.com/2562479
- https://bugzilla.redhat.com/2562486
- https://bugzilla.redhat.com/2562496
- https://bugzilla.redhat.com/2563744
- https://bugzilla.redhat.com/2563759
- https://errata.almalinux.org/9/ALSA-2026-95194.html
Affected packages
AlmaLinux:9 / webkit2gtk3
Package
- Name
- webkit2gtk3
- Purl
- pkg:rpm/almalinux/webkit2gtk3
AlmaLinux:9 / webkit2gtk3-devel
Package
- Name
- webkit2gtk3-devel
- Purl
- pkg:rpm/almalinux/webkit2gtk3-devel
AlmaLinux:9 / webkit2gtk3-jsc
Package
- Name
- webkit2gtk3-jsc
- Purl
- pkg:rpm/almalinux/webkit2gtk3-jsc