{"id":"CLSA-2026-1779956120","summary":"webkit2gtk3: Fix of 4 CVEs","details":"- CVE-2026-20643: fix Navigation API cross-subdomain intercept\n  (WebKit bug 306050)\n- CVE-2026-20665: fix CSP bypass in sandboxed srcdoc iframes\n  (WebKit bug 304951)\n- CVE-2026-20691: fix WebContent process starting local file loads\n  it cannot access (WebKit bug 306827)\n- CVE-2026-28871: fix content served as video/mp2t being loaded as HTML\n  (WebKit bug 305859)","modified":"2026-10-26T09:31:05.653470567Z","published":"2026-05-28T08:15:24Z","upstream":["CVE-2026-20643","CVE-2026-20665","CVE-2026-20691","CVE-2026-28871"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779956120.html"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779956120.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779956120.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-jsc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779956120.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/webkit2gtk3-jsc-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779956120.json"}}],"schema_version":"1.9.0"}