{"id":"RHSA-2026:91636","summary":"Red Hat Security Advisory: webkit2gtk3 security update","modified":"2026-11-13T19:14:12.108823263Z","published":"2026-11-13T18:48:20Z","upstream":["CVE-2026-106245","CVE-2026-106247","CVE-2026-106293","CVE-2026-106304","CVE-2026-113140","CVE-2026-113143","CVE-2026-113200","CVE-2026-113234","CVE-2026-113250","CVE-2026-113273","CVE-2026-113315","CVE-2026-118322","CVE-2026-95325","CVE-2026-95331"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:91636"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543413"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543421"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546829"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546942"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546956"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546958"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91636.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-95325"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-95325"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95325"},{"type":"ARTICLE","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/536648933"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-95331"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-95331"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95331"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/500127519"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-106245"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-106245"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106245"},{"type":"ARTICLE","url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/550302121"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-106247"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-106247"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106247"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/524435922"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-106293"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-106293"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106293"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/547343108"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-106304"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-106304"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106304"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/553124799"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-113140"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556757"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-113140"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113140"},{"type":"ARTICLE","url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/536445815"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-113143"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556647"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-113143"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113143"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/563352451"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-113200"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556973"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-113200"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113200"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/563350676"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-113234"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556909"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-113234"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113234"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/556750158"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-113250"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556977"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-113250"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113250"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/490808751"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-113273"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556679"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-113273"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113273"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/561999377"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-113315"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556720"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-113315"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113315"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/553117511"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-118322"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562484"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-118322"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118322"},{"type":"ARTICLE","url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html"},{"type":"ARTICLE","url":"https://issues.chromium.org/issues/568895029"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}},{"package":{"name":"webkit2gtk3-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}},{"package":{"name":"webkit2gtk3-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}},{"package":{"name":"webkit2gtk3-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-devel-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}},{"package":{"name":"webkit2gtk3-jsc-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}},{"package":{"name":"webkit2gtk3-jsc-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-1.el8_10"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:91636.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}