CLSA-2026-1784988522
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1784988522.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1784988522
- Upstream
CVE (23)
- CVE-2024-4367
- CVE-2026-39872
- CVE-2026-43663
- CVE-2026-43676
- CVE-2026-43699
- CVE-2026-43701
- CVE-2026-43705
- CVE-2026-43707
- CVE-2026-43712
- CVE-2026-43713
- CVE-2026-43715
- CVE-2026-43716
- CVE-2026-43720
- CVE-2026-43721
- CVE-2026-43725
- CVE-2026-43726
- CVE-2026-43727
- CVE-2026-43731
- CVE-2026-43732
- CVE-2026-43734
- CVE-2026-43740
- CVE-2026-43742
- CVE-2026-43745
- Published
- 2026-07-25T14:09:14Z
- Modified
- 2026-10-26T09:30:29Z
- Summary
- webkit2gtk3: Fix of 23 CVEs
- Details
-
- Rebase to webkitgtk 2.52.5 (WebKitGTK Security Advisory WSA-2026-0004), aligning with the 2.52.x security baseline shipped by RHEL 9 (RHSA-2026:42062).
- CVEs resolved by this rebase: CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745.
- Drop fix-system-malloc-llint-extractor.patch; the upstream cherry-pick (WebKit 314364@main) is now included in 2.52.5.
- Refresh libsoup2.patch for the 2.52.5 library version triplet bumps (WEBKIT 21/9/21, JAVASCRIPTCORE 10/13/10 on API 4.1; WEBKIT 20/9/16, JAVASCRIPTCORE 8/13/7 on API 6.0). The webkit2gtk-4.0 SONAME (libwebkit2gtk-4.0.so.37) is preserved.
- References
-
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784988522.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-4367
- https://nvd.nist.gov/vuln/detail/CVE-2026-39872
- https://nvd.nist.gov/vuln/detail/CVE-2026-43663
- https://nvd.nist.gov/vuln/detail/CVE-2026-43676
- https://nvd.nist.gov/vuln/detail/CVE-2026-43699
- https://nvd.nist.gov/vuln/detail/CVE-2026-43701
- https://nvd.nist.gov/vuln/detail/CVE-2026-43705
- https://nvd.nist.gov/vuln/detail/CVE-2026-43707
- https://nvd.nist.gov/vuln/detail/CVE-2026-43712
- https://nvd.nist.gov/vuln/detail/CVE-2026-43713
- https://nvd.nist.gov/vuln/detail/CVE-2026-43715
- https://nvd.nist.gov/vuln/detail/CVE-2026-43716
- https://nvd.nist.gov/vuln/detail/CVE-2026-43720
- https://nvd.nist.gov/vuln/detail/CVE-2026-43721
- https://nvd.nist.gov/vuln/detail/CVE-2026-43725
- https://nvd.nist.gov/vuln/detail/CVE-2026-43726
- https://nvd.nist.gov/vuln/detail/CVE-2026-43727
- https://nvd.nist.gov/vuln/detail/CVE-2026-43731
- https://nvd.nist.gov/vuln/detail/CVE-2026-43732
- https://nvd.nist.gov/vuln/detail/CVE-2026-43734
- https://nvd.nist.gov/vuln/detail/CVE-2026-43740
- https://nvd.nist.gov/vuln/detail/CVE-2026-43742
- https://nvd.nist.gov/vuln/detail/CVE-2026-43745
Affected packages
TuxCare:AlmaLinux:9.2 / webkit2gtk3
Package
- Name
- webkit2gtk3
- Purl
- pkg:rpm/tuxcare/webkit2gtk3?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / webkit2gtk3-devel
Package
- Name
- webkit2gtk3-devel
- Purl
- pkg:rpm/tuxcare/webkit2gtk3-devel?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / webkit2gtk3-jsc
Package
- Name
- webkit2gtk3-jsc
- Purl
- pkg:rpm/tuxcare/webkit2gtk3-jsc?distro=almalinux-9.2