ALSA-2026:95194

Dashboard / Vulnerabilities / ALSA-2026:95194

ALSA-2026:95194

Summary: Important: webkit2gtk3 security update

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049) * chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747) * chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733) * chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740) * chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387) * chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325) * chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629) * chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379) * chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399) * chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106) * chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348) * chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351) * chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340) * chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354) * chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319) * chromium-browser: skia: Use after free in Skia (CVE-2026-119271) * chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2026:95194, https://access.redhat.com/security/cve/CVE-2026-102325, https://access.redhat.com/security/cve/CVE-2026-103629, https://access.redhat.com/security/cve/CVE-2026-106379, https://access.redhat.com/security/cve/CVE-2026-106399, https://access.redhat.com/security/cve/CVE-2026-113106, https://access.redhat.com/security/cve/CVE-2026-118319, https://access.redhat.com/security/cve/CVE-2026-118340, https://access.redhat.com/security/cve/CVE-2026-118348, https://access.redhat.com/security/cve/CVE-2026-118351, https://access.redhat.com/security/cve/CVE-2026-118354, https://access.redhat.com/security/cve/CVE-2026-119261, https://access.redhat.com/security/cve/CVE-2026-119271, https://access.redhat.com/security/cve/CVE-2026-85049, https://access.redhat.com/security/cve/CVE-2026-91733, https://access.redhat.com/security/cve/CVE-2026-91740, https://access.redhat.com/security/cve/CVE-2026-91747, https://access.redhat.com/security/cve/CVE-2026-93387, https://bugzilla.redhat.com/2528197, https://bugzilla.redhat.com/2534512, https://bugzilla.redhat.com/2534705, https://bugzilla.redhat.com/2534759, https://bugzilla.redhat.com/2537950, https://bugzilla.redhat.com/2543588, https://bugzilla.redhat.com/2545277, https://bugzilla.redhat.com/2546915, https://bugzilla.redhat.com/2547009, https://bugzilla.redhat.com/2556522, https://bugzilla.redhat.com/2562464, https://bugzilla.redhat.com/2562477, https://bugzilla.redhat.com/2562479, https://bugzilla.redhat.com/2562486, https://bugzilla.redhat.com/2562496, https://bugzilla.redhat.com/2563744, https://bugzilla.redhat.com/2563759, https://errata.almalinux.org/9/ALSA-2026-95194.html