CLSA-2026-1792402249
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792402249.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792402249
- Upstream
CVE (4)
- CVE-2026-17771
- CVE-2026-91733
- CVE-2026-91740
- CVE-2026-91747
- Published
- 2026-10-19T13:00:31Z
- Modified
- 2026-10-26T09:43:42Z
- Summary
- webkit2gtk3: Fix of 4 CVEs
- Details
-
- CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update
- CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia
- CVE-2026-91733: missing flush failure handling in the Skia GPU backend
- CVE-2026-17771: uninitialized texture padding read by Skia linear sampling
- References
Affected packages
TuxCare:AlmaLinux:9.2 / webkit2gtk3
Package
- Name
- webkit2gtk3
- Purl
- pkg:rpm/tuxcare/webkit2gtk3?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / webkit2gtk3-devel
Package
- Name
- webkit2gtk3-devel
- Purl
- pkg:rpm/tuxcare/webkit2gtk3-devel?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / webkit2gtk3-jsc
Package
- Name
- webkit2gtk3-jsc
- Purl
- pkg:rpm/tuxcare/webkit2gtk3-jsc?distro=almalinux-9.2