RLSA-2026:74084
RLSA-2026:74084 · Critical: webkit2gtk3 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860) * chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532) * chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444) * chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901) * chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478) * chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502) * chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908) * chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931) * chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-3909) * chromium-browser: Integer overflow in ANGLE (CVE-2026-4464) * chromium-browser: Integer overflow in ANGLE (CVE-2026-4452) * chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-4448) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460) * chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-5283) * chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5275) * chromium-browser: Integer overflow in ANGLE (CVE-2026-5277) * chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5868) * chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870) * chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-6296) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353) * chromium-browser: Integer overflow in ANGLE (CVE-2026-7340) * chromium-browser: Use after free in ANGLE (CVE-2026-7359) * chromium-browser: Out of bounds read and write in Angle (CVE-2026-7354) * chromium-browser: Use after free in ANGLE (CVE-2026-7901) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949) * chromium-browser: Integer overflow in ANGLE (CVE-2026-7903) * chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923) * chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-7900) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920) * chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942) * chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510) * chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525) * chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554) * chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-8556) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579) * chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8567) * chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8519) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020) * chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9915) * chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9928) * chromium-browser: Use after free in ANGLE (CVE-2026-9932) * chromium-browser: Use after free in ANGLE (CVE-2026-9904) * chromium-browser: Integer overflow in ANGLE (CVE-2026-10018) * chromium-browser: Out of bounds write in ANGLE (CVE-2026-9879) * chromium-browser: Use after free in ANGLE (CVE-2026-9899) * chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9940) * chromium-browser: angle: Use after free in ANGLE (CVE-2026-9925) * chromium-browser: Out of bounds write in ANGLE (CVE-2026-9965) * chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9926) * chromium-browser: Use after free in ANGLE (CVE-2026-9877) * chromium-browser: angle: Use after free in ANGLE (CVE-2026-9927) * chromium-browser: Use after free in ANGLE (CVE-2026-9946) * chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9999) * chromium-browser: Integer overflow in ANGLE (CVE-2026-9882) * chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-9910) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909) * chromium-browser: Out of bounds read in ANGLE (CVE-2026-9908) * chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9924) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012) * chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9944) * chromium-browser: Out of bounds read in ANGLE (CVE-2026-9953) * chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-9975) * chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9982) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893) * chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-9914) * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981) * chromium-browser: Use after free in ANGLE (CVE-2026-9941) * chromium-browser: Integer overflow in ANGLE (CVE-2026-10019) * chromium-browser: Use after free in ANGLE (CVE-2026-9878) * chromium-browser: Use after free in ANGLE (CVE-2026-9901) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998) * chromium-browser: Out of bounds write in ANGLE (CVE-2026-9900) * chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-9969) * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011) * chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9935) * chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9911) * chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-9913) * chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9942) * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892) * chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983) * chromium-browser: Out of bounds write in ANGLE (CVE-2026-9916) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985) * chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-11113) * chromium-browser: Out of bounds read in
CVSS 9.6 · Critical · Fix available
- Published
- Updated
Stack: system
Affected products and versions
webkit2gtk3 Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:2.54.0-1.el8_10
Update to 0:2.54.0-1.el8_10
Original sources
- https://errata.rockylinux.org/RLSA-2026:74084
- https://bugzilla.redhat.com/show_bug.cgi?id=2298302
- https://bugzilla.redhat.com/show_bug.cgi?id=2303272
- https://bugzilla.redhat.com/show_bug.cgi?id=2307088
- https://bugzilla.redhat.com/show_bug.cgi?id=2308415
- https://bugzilla.redhat.com/show_bug.cgi?id=2308417
- https://bugzilla.redhat.com/show_bug.cgi?id=2311665
- https://bugzilla.redhat.com/show_bug.cgi?id=2314571
- https://bugzilla.redhat.com/show_bug.cgi?id=2338161
- https://bugzilla.redhat.com/show_bug.cgi?id=2343797
- https://bugzilla.redhat.com/show_bug.cgi?id=2388151
- https://bugzilla.redhat.com/show_bug.cgi?id=2391109
- https://bugzilla.redhat.com/show_bug.cgi?id=2397874
- https://bugzilla.redhat.com/show_bug.cgi?id=2431128
- https://bugzilla.redhat.com/show_bug.cgi?id=2444613
- https://bugzilla.redhat.com/show_bug.cgi?id=2444617
- https://bugzilla.redhat.com/show_bug.cgi?id=2446868
- https://bugzilla.redhat.com/show_bug.cgi?id=2447195
- https://bugzilla.redhat.com/show_bug.cgi?id=2449382
- https://bugzilla.redhat.com/show_bug.cgi?id=2449388
- https://bugzilla.redhat.com/show_bug.cgi?id=2449406
- https://bugzilla.redhat.com/show_bug.cgi?id=2449412
- https://bugzilla.redhat.com/show_bug.cgi?id=2453681
- https://osv.dev/vulnerability/RLSA-2026:74084