OESA-2026-3770

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3770
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3770.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3770
Upstream
  • CVE-2026-78376
  • CVE-2026-83596
Published
2026-09-14T16:34:09Z
Modified
2026-09-13T16:45:37Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
webkitgtk security update
Details

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 3.

Security Fix(es):

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.(CVE-2026-78376)

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. The vulnerability exists in the findFeature function of OpenTypeVerticalData, which fails to properly validate the full featurelist array.(CVE-2026-83596)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:24.03-LTS-SP1 / webkitgtk

Package

Name
webkitgtk
Purl
pkg:rpm/openEuler/webkitgtk&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
webkit2gtk5.0-2.38.2-14.oe2403sp1

Ecosystem specific 

{
    "aarch64": [
        "jsc4.1-2.38.2-14.oe2403sp1.aarch64.rpm",
        "jsc4.1-devel-2.38.2-14.oe2403sp1.aarch64.rpm",
        "jsc5.0-2.38.2-14.oe2403sp1.aarch64.rpm",
        "jsc5.0-devel-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk3-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk3-debuginfo-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk3-debugsource-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk3-devel-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk3-jsc-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk3-jsc-devel-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk4.1-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk4.1-debuginfo-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk4.1-debugsource-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk4.1-devel-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk5.0-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk5.0-debuginfo-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk5.0-debugsource-2.38.2-14.oe2403sp1.aarch64.rpm",
        "webkit2gtk5.0-devel-2.38.2-14.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "webkit2gtk3-help-2.38.2-14.oe2403sp1.noarch.rpm",
        "webkit2gtk4.1-help-2.38.2-14.oe2403sp1.noarch.rpm",
        "webkit2gtk5.0-help-2.38.2-14.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "webkit2gtk3-2.38.2-14.oe2403sp1.src.rpm",
        "webkit2gtk4.1-2.38.2-14.oe2403sp1.src.rpm",
        "webkit2gtk5.0-2.38.2-14.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "jsc4.1-2.38.2-14.oe2403sp1.x86_64.rpm",
        "jsc4.1-devel-2.38.2-14.oe2403sp1.x86_64.rpm",
        "jsc5.0-2.38.2-14.oe2403sp1.x86_64.rpm",
        "jsc5.0-devel-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk3-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk3-debuginfo-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk3-debugsource-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk3-devel-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk3-jsc-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk3-jsc-devel-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk4.1-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk4.1-debuginfo-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk4.1-debugsource-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk4.1-devel-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk5.0-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk5.0-debuginfo-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk5.0-debugsource-2.38.2-14.oe2403sp1.x86_64.rpm",
        "webkit2gtk5.0-devel-2.38.2-14.oe2403sp1.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3770.json"