{"id":"RLSA-2026:91580","summary":"Important: webkit2gtk3 security update","details":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304)\n\n* chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247)\n\n* chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293)\n\n* chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-10-30T12:30:03.307834174Z","published":"2026-10-30T12:04:27.805649Z","upstream":["CVE-2026-106245","CVE-2026-106247","CVE-2026-106293","CVE-2026-106304","CVE-2026-95325","CVE-2026-95331"],"database_specific":{"source_advisory":"RHSA-2026:91580","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/"},"references":[{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:91580"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543413"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543421"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546829"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546942"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546956"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546958"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:91580"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-0.el9_8.1"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:91580.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"credits":[{"name":"Rocky Enterprise Software Foundation"},{"name":"Red Hat"}]}