[ALSA-2026:84583] Critical: webkit2gtk3 security, bug fix, and enhancement update
Type:
security
Severity:
critical
Release date:
2026-10-19
Description:
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read (CVE-2026-87596) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-87500) * chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE (CVE-2026-87654) * chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability (CVE-2026-87621) * chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE (CVE-2026-87512) * chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free (CVE-2026-87648) * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page (CVE-2026-87602) * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page (CVE-2026-87586) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read (CVE-2026-87604) * chromium-browser: angle: chromium-browser: Improper input validation in ANGLE (CVE-2026-91738) * chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE (CVE-2026-91720) Bug Fix(es) and Enhancement(s): * webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 [almalinux-9.8.z] (JIRA:AlmaLinux-274394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 webkit2gtk3-devel-2.54.1-1.el9_8.aarch64.rpm 1433871324f129f8a4d38418d3e0fe18beb513b612d91a763a6206f31882c6de
aarch64 webkit2gtk3-jsc-2.54.1-1.el9_8.aarch64.rpm e12ad613ad6738a68bfb9ea10e5ff0be682ff09b7a1730c5db000fc836b8e8fa
aarch64 webkit2gtk3-jsc-devel-2.54.1-1.el9_8.aarch64.rpm e3f2d30549ea2d88e4495647948d0f45312ab50db9479e0a849e48667508538f
aarch64 webkit2gtk3-2.54.1-1.el9_8.aarch64.rpm fdad917131a4d69e245fd3c35d01c4e794acd42ef6a1b1a27d878d2a2893790f
i686 webkit2gtk3-2.54.1-1.el9_8.i686.rpm 2bb27dc0218b2f8d663d0e196886d35cafc06d8c20542b09644bbb1f2af48924
i686 webkit2gtk3-jsc-2.54.1-1.el9_8.i686.rpm 4c84cd11cf4b3237e007be017a6f0039fe9fc30a043d3b83878ae9e818714088
i686 webkit2gtk3-jsc-devel-2.54.1-1.el9_8.i686.rpm 4d7bdbafa4ed5cee513b1be4ad671643d5c32d3bba03cfd1cd8d180d81a00510
i686 webkit2gtk3-devel-2.54.1-1.el9_8.i686.rpm d7763bcf3da8ee1a5ddaad67208fe43ebd2d035ffc75e4adba151e1d071a7ad9
ppc64le webkit2gtk3-jsc-2.54.1-1.el9_8.ppc64le.rpm 1f311569de7482abe9018912cbaf3bec9c20fbdefa598d5b24325c5a04c69f0d
ppc64le webkit2gtk3-2.54.1-1.el9_8.ppc64le.rpm 2bb4ad7866d594260770f8f65eef6aa0a51829c2ea637c5900563867db1711fd
ppc64le webkit2gtk3-jsc-devel-2.54.1-1.el9_8.ppc64le.rpm 8c315755f1288ddfb0f4b23c93100f4ad8d3c571ba6fb65bab94e966a29ac54f
ppc64le webkit2gtk3-devel-2.54.1-1.el9_8.ppc64le.rpm b481d235a64a267c505f4707657441c2d35907cf4218644954c01589c022e25a
s390x webkit2gtk3-2.54.1-1.el9_8.s390x.rpm 2e5aeaf72d34b567ada64425f28b9f1c3fe6fd3dc2687786a0db054bb1c1e345
s390x webkit2gtk3-jsc-2.54.1-1.el9_8.s390x.rpm 87bec56e9cef064a2979a5ec251113eeb9e9f851b7469923a0c1b7c929f6e345
s390x webkit2gtk3-jsc-devel-2.54.1-1.el9_8.s390x.rpm c7153a10d6ce18915be475df17eac3764eb51b8b569bec5d6fa0599d1ef32433
s390x webkit2gtk3-devel-2.54.1-1.el9_8.s390x.rpm e02cde5e45cca6132a806b6eec312d587438a3d73bf2b67b074173cf378b0774
x86_64 webkit2gtk3-jsc-2.54.1-1.el9_8.x86_64.rpm 0d78029f16f192f3adfdfa22011e197c361c63ba83b30c3a757c2cb08a583446
x86_64 webkit2gtk3-jsc-devel-2.54.1-1.el9_8.x86_64.rpm 10dc67e795412a8f4f5ea9e893e8a630962419d37c3ea65ca3cb8469c0e7e794
x86_64 webkit2gtk3-2.54.1-1.el9_8.x86_64.rpm 61aa55f7ec80fc716211f1868215b08ad18e90984a9284ca868d3e3a5b00eef4
x86_64 webkit2gtk3-devel-2.54.1-1.el9_8.x86_64.rpm 9797e24141ce9fb30ec86973a9c8250f94047a42341d0fbdeff791b68c0945c3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.