{"id":"RLSA-2026:98455","summary":"Critical: webkit2gtk3 security, bug fix, and enhancement update","details":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)\n\n* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)\n\n* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)\n\n* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892)\n\n* chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993)\n\n* chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-10977)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-10925)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia (CVE-2026-10941)\n\n* chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia (CVE-2026-11099)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-11663)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11675)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-13841)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-13971)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-13820)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-13885)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-13781)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14414)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14389)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14387)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-14410)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-14419)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14429)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-14427)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-15766)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-15774)\n\n* chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Skia (CVE-2026-16417)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-17702)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17757)\n\n* chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia (CVE-2026-17914)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17992)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-17745)\n\n* chromium-browser: skia: chromium-browser: skia: Race in Skia (CVE-2026-17712)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17771)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-17653)\n\n* chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome (CVE-2026-19160)\n\n* chromium-browser: skia: chromium-browser: Out of bounds read in Skia (CVE-2026-79112)\n\n* chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia (CVE-2026-78914)\n\n* chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome (CVE-2026-79147)\n\n* chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-78958)\n\n* chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-79144)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65333)\n\n* chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)\n\n* chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)\n\n* chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)\n\n* chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)\n\n* chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)\n\n* chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)\n\n* chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)\n\n* chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)\n\n* chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)\n\n* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)\n\n* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)\n\n* chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)\n\n* chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)\n\n* chromium-browser: skia: Use after free in Skia (CVE-2026-119271)\n\n* chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)\n\nBug Fix(es) and Enhancement(s):\n\n* webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 (JIRA:Rocky Linux-271317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-11-13T12:45:02.750209233Z","published":"2026-11-13T12:04:43.442503Z","upstream":["CVE-2023-4860","CVE-2024-7966","CVE-2024-8193","CVE-2024-8198","CVE-2024-8636","CVE-2024-9123","CVE-2025-0436","CVE-2025-0444","CVE-2026-10009","CVE-2026-10011","CVE-2026-10012","CVE-2026-10020","CVE-2026-102325","CVE-2026-103629","CVE-2026-106379","CVE-2026-106399","CVE-2026-10925","CVE-2026-10941","CVE-2026-10977","CVE-2026-10985","CVE-2026-10993","CVE-2026-11024","CVE-2026-11039","CVE-2026-11057","CVE-2026-11099","CVE-2026-11121","CVE-2026-11124","CVE-2026-11159","CVE-2026-113106","CVE-2026-11663","CVE-2026-11675","CVE-2026-118319","CVE-2026-118340","CVE-2026-118348","CVE-2026-118351","CVE-2026-118354","CVE-2026-119261","CVE-2026-119271","CVE-2026-13781","CVE-2026-13820","CVE-2026-13841","CVE-2026-13885","CVE-2026-13971","CVE-2026-14387","CVE-2026-14389","CVE-2026-14410","CVE-2026-14414","CVE-2026-14419","CVE-2026-14427","CVE-2026-14429","CVE-2026-15766","CVE-2026-15774","CVE-2026-16417","CVE-2026-17653","CVE-2026-17702","CVE-2026-17712","CVE-2026-17745","CVE-2026-17757","CVE-2026-17771","CVE-2026-17914","CVE-2026-17992","CVE-2026-19160","CVE-2026-3538","CVE-2026-3931","CVE-2026-4460","CVE-2026-5870","CVE-2026-6298","CVE-2026-6364","CVE-2026-65333","CVE-2026-7353","CVE-2026-78914","CVE-2026-78958","CVE-2026-79112","CVE-2026-79144","CVE-2026-79147","CVE-2026-7920","CVE-2026-7923","CVE-2026-7949","CVE-2026-84359","CVE-2026-85049","CVE-2026-8510","CVE-2026-8579","CVE-2026-91733","CVE-2026-91740","CVE-2026-91747","CVE-2026-93387","CVE-2026-9892","CVE-2026-9893","CVE-2026-9909","CVE-2026-9923","CVE-2026-9981","CVE-2026-9983","CVE-2026-9998"],"database_specific":{"source_advisory":"RHSA-2026:98455","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/"},"references":[{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:98455"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2298302"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2307088"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308415"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308417"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2311665"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314571"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338161"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343797"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2444617"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446868"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449412"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456802"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458786"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458798"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463657"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467316"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467351"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467385"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477624"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477666"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482973"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482975"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483023"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483035"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483045"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483056"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483062"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483070"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483103"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483108"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483114"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484949"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484981"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484992"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485015"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485036"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485043"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485071"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485081"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485236"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485289"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485352"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485638"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486642"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486644"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2495548"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2495557"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2495595"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2495605"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2495660"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496263"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496264"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496275"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496282"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496283"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496304"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496308"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500647"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500689"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2505966"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508687"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508726"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508773"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508809"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508884"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508941"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508949"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508987"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2512341"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523847"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523904"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523912"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523958"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524104"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524577"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2527168"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528197"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534512"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534705"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534759"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2537950"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543588"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545277"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546915"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547009"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556522"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562464"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562477"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562479"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562486"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562496"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563744"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563759"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:98455"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debugsource","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debugsource?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debugsource","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debugsource?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debugsource","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debugsource?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debugsource","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debugsource?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-debugsource","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-debugsource?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}},{"package":{"name":"webkit2gtk3-jsc-devel-debuginfo","ecosystem":"Rocky Linux:9","purl":"pkg:rpm/rocky-linux/webkit2gtk3-jsc-devel-debuginfo?distro=rocky-linux-9&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.54.2-2.el9_9"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98455.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"}],"credits":[{"name":"Rocky Enterprise Software Foundation"},{"name":"Red Hat"}]}