alsa-2026:91580

osv_almalinux
Description

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325) * chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331) * chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304) * chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247) * chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293) * chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [
    {
      "database_specific": {
        "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:91580.json"
      },
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3",
        "purl": "pkg:rpm/almalinux/webkit2gtk3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.54.2-0.el9_8.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:91580.json"
      },
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-devel",
        "purl": "pkg:rpm/almalinux/webkit2gtk3-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.54.2-0.el9_8.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:91580.json"
      },
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-jsc",
        "purl": "pkg:rpm/almalinux/webkit2gtk3-jsc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.54.2-0.el9_8.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:91580.json"
      },
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-jsc-devel",
        "purl": "pkg:rpm/almalinux/webkit2gtk3-jsc-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.54.2-0.el9_8.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325)\n  * chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331)\n  * chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304)\n  * chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247)\n  * chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293)\n  * chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:91580",
  "modified": "2026-11-04T16:58:08.245243238Z",
  "published": "2026-10-28T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:91580"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-106245"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-106247"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-106293"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-106304"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-95325"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-95331"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2543413"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2543421"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2546829"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2546942"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2546956"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2546958"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2026-91580.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.redhat.com/security/data/cve/CVE-2026-113140.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.redhat.com/security/data/cve/CVE-2026-113143.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.redhat.com/security/data/cve/CVE-2026-113200.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.redhat.com/security/data/cve/CVE-2026-113234.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.redhat.com/security/data/cve/CVE-2026-113250.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.redhat.com/security/data/cve/CVE-2026-113273.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.redhat.com/security/data/cve/CVE-2026-113315.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.redhat.com/security/data/cve/CVE-2026-118322.html"
    }
  ],
  "related": [
    "CVE-2026-106245",
    "CVE-2026-106247",
    "CVE-2026-106293",
    "CVE-2026-106304",
    "CVE-2026-113140",
    "CVE-2026-113143",
    "CVE-2026-113200",
    "CVE-2026-113234",
    "CVE-2026-113250",
    "CVE-2026-113273",
    "CVE-2026-113315",
    "CVE-2026-118322",
    "CVE-2026-95325",
    "CVE-2026-95331"
  ],
  "schema_version": "1.9.2",
  "summary": "Important: webkit2gtk3 security update",
  "upstream": [
    "CVE-2026-106245",
    "CVE-2026-106247",
    "CVE-2026-106293",
    "CVE-2026-106304",
    "CVE-2026-113140",
    "CVE-2026-113143",
    "CVE-2026-113200",
    "CVE-2026-113234",
    "CVE-2026-113250",
    "CVE-2026-113273",
    "CVE-2026-113315",
    "CVE-2026-118322",
    "CVE-2026-95325",
    "CVE-2026-95331"
  ]
}
View JSON API Download JSON