[ALSA-2026:84584] Critical: webkit2gtk3 security, bug fix, and enhancement update
Type:
security
Severity:
critical
Release date:
2026-10-19
Description:
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read (CVE-2026-87596) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-87500) * chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE (CVE-2026-87654) * chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability (CVE-2026-87621) * chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE (CVE-2026-87512) * chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free (CVE-2026-87648) * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page (CVE-2026-87602) * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page (CVE-2026-87586) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read (CVE-2026-87604) * chromium-browser: angle: chromium-browser: Improper input validation in ANGLE (CVE-2026-91738) * chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE (CVE-2026-91720) Bug Fix(es) and Enhancement(s): * webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 [almalinux-8.10.z] (JIRA:AlmaLinux-274406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 webkit2gtk3-devel-2.54.1-1.el8_10.aarch64.rpm 7d3dd7f92b0621c47bb5afed43166d963d69f0d6beee79125f0d2a0c5732b04b
aarch64 webkit2gtk3-jsc-2.54.1-1.el8_10.aarch64.rpm a09b2de43f17ec312a0210983c9b0b466d1b67689056c0584370533f1ef30e17
aarch64 webkit2gtk3-2.54.1-1.el8_10.aarch64.rpm b31ac2832b58c25070ab2c39cfcd0deaf0fcd39eedd2f827550dc7f597022f5e
aarch64 webkit2gtk3-jsc-devel-2.54.1-1.el8_10.aarch64.rpm dee6985dced90fdadcbae059a1587ac00e8035b7489fe45115b792c556d788c4
i686 webkit2gtk3-jsc-devel-2.54.1-1.el8_10.i686.rpm 3c3474d7e6b59dd3f7355f0bc8dd13fc063985b3df702ca7055b1f072b5ddc8e
i686 webkit2gtk3-2.54.1-1.el8_10.i686.rpm 874a0ad8140987d8c7386ea04d156b672f8b8036463e49e5b05c5b780364bcd9
i686 webkit2gtk3-devel-2.54.1-1.el8_10.i686.rpm e980dcf62f65f7b4ecd456b003e80c3811a37a801f8a76b9e12b23e9293aaf44
i686 webkit2gtk3-jsc-2.54.1-1.el8_10.i686.rpm fe3ea927b3e832b9e726eaf3178edc341798484a0b2d0e60ccc8ab8c57ce2114
ppc64le webkit2gtk3-jsc-2.54.1-1.el8_10.ppc64le.rpm 11b0abe2cc959712bfb127066c1bb0aa00df5b9818ec9779f33cf9943bbba347
ppc64le webkit2gtk3-devel-2.54.1-1.el8_10.ppc64le.rpm 77b6c3fa46b60daea158ae1ff79a973b33270e6147e5b8db0cbcf3213f7c7c4e
ppc64le webkit2gtk3-2.54.1-1.el8_10.ppc64le.rpm 7845885808df974f756eb90f6cf90688bf392205d2c843845449803fd0aeacea
ppc64le webkit2gtk3-jsc-devel-2.54.1-1.el8_10.ppc64le.rpm bcd61c02ce2253c940a34c6ca05648a29787a7a0c8d0daba9b26a109304a3a20
s390x webkit2gtk3-jsc-2.54.1-1.el8_10.s390x.rpm 0f34452e203f4ce5c30aebd389da27fc00b3151a7bc5d5a801ed0a512a30ded0
s390x webkit2gtk3-devel-2.54.1-1.el8_10.s390x.rpm 2e4a96423ee2c69354efd6f4f4b043edb9b15af68f427c5b5e2dbab233f7d85d
s390x webkit2gtk3-jsc-devel-2.54.1-1.el8_10.s390x.rpm 42eacc9de11a8b7edee1cad7a242dd8d634aa607398097874a79105709b49490
s390x webkit2gtk3-2.54.1-1.el8_10.s390x.rpm cdb1fda93c316a362bfce5ec35d4a0be5f0818b6f021e40e8b09b85ff78b8774
x86_64 webkit2gtk3-2.54.1-1.el8_10.x86_64.rpm 8c754a803e6f2acd97c096f75ee64ef8a2eefa9ddf4a3ef03cd61ae6f48fc525
x86_64 webkit2gtk3-jsc-2.54.1-1.el8_10.x86_64.rpm a3a4ee36cca50325751357bc76145ea3ee75906b2a61a7394ffefed993bf4302
x86_64 webkit2gtk3-devel-2.54.1-1.el8_10.x86_64.rpm c3151170140c637ab16c9886d24f3382367102a5c3ed434ef97adc784d84c01f
x86_64 webkit2gtk3-jsc-devel-2.54.1-1.el8_10.x86_64.rpm ef021ff2378afe10814168fc78882532c2e86a7448b11692178ab89c73d16938
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.