{"id":"RHSA-2026:84584","summary":"Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update","modified":"2026-10-19T10:15:33.923732508Z","published":"2026-10-19T10:08:01Z","upstream":["CVE-2026-87500","CVE-2026-87512","CVE-2026-87586","CVE-2026-87596","CVE-2026-87602","CVE-2026-87604","CVE-2026-87621","CVE-2026-87648","CVE-2026-87654","CVE-2026-91720","CVE-2026-91738"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:84584"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#critical"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530272"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530296"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530305"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530333"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530389"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530396"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530447"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530458"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530475"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534404"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534673"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84584.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87500"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87500"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87500"},{"type":"ARTICLE","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/540019091"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87512"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87512"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87512"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/541715128"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87586"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87586"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87586"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/536598187"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87596"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87596"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87596"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/536434693"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87602"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87602"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87602"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/541546782"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87604"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87604"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87604"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/536648007"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87621"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87621"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87621"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/536664909"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87648"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87648"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87648"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/513048243"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87654"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87654"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87654"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/536444790"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91720"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-91720"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91720"},{"type":"ARTICLE","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/523470135"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91738"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-91738"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91738"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/536450979"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}},{"package":{"name":"webkit2gtk3-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}},{"package":{"name":"webkit2gtk3-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}},{"package":{"name":"webkit2gtk3-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-devel-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}},{"package":{"name":"webkit2gtk3-jsc-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}},{"package":{"name":"webkit2gtk3-jsc-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.1-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84584.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"}]}