Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:98455 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:98455 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Critical: webkit2gtk3 security, bug fix, and enhancement update

Type/Severity

Security Advisory: Critical

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
  • chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
  • chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
  • chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892)
  • chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993)
  • chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-10977)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-10925)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia (CVE-2026-10941)
  • chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia (CVE-2026-11099)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-11663)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11675)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-13841)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-13971)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-13820)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-13885)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-13781)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14414)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14389)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14387)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-14410)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-14419)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14429)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-14427)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-15766)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-15774)
  • chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Skia (CVE-2026-16417)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-17702)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17757)
  • chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia (CVE-2026-17914)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17992)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-17745)
  • chromium-browser: skia: chromium-browser: skia: Race in Skia (CVE-2026-17712)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17771)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-17653)
  • chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome (CVE-2026-19160)
  • chromium-browser: skia: chromium-browser: Out of bounds read in Skia (CVE-2026-79112)
  • chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia (CVE-2026-78914)
  • chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome (CVE-2026-79147)
  • chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-78958)
  • chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-79144)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65333)
  • chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
  • chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
  • chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
  • chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
  • chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
  • chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
  • chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
  • chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
  • chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
  • chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
  • chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
  • chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
  • chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
  • chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
  • chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)

Bug Fix(es) and Enhancement(s):

  • webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 (JIRA:RHEL-271317)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64

Fixes

  • BZ - 2298302 - CVE-2023-4860 chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia
  • BZ - 2307088 - CVE-2024-7966 chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page
  • BZ - 2308415 - CVE-2024-8193 chromium: skia: chromium: skia: Heap buffer overflow in Skia
  • BZ - 2308417 - CVE-2024-8198 chromium: skia: chromium: skia: Heap buffer overflow in Skia
  • BZ - 2311665 - CVE-2024-8636 chromium: skia: chromium: skia: Heap buffer overflow in Skia
  • BZ - 2314571 - CVE-2024-9123 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome
  • BZ - 2338161 - CVE-2025-0436 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2343797 - CVE-2025-0444 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2444617 - CVE-2026-3538 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2446868 - CVE-2026-3931 chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
  • BZ - 2449412 - CVE-2026-4460 chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
  • BZ - 2456802 - CVE-2026-5870 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2458786 - CVE-2026-6364 chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
  • BZ - 2458798 - CVE-2026-6298 chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
  • BZ - 2463657 - CVE-2026-7353 chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
  • BZ - 2467316 - CVE-2026-7949 chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
  • BZ - 2467351 - CVE-2026-7923 chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia
  • BZ - 2467385 - CVE-2026-7920 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2477624 - CVE-2026-8510 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2477666 - CVE-2026-8579 chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
  • BZ - 2482973 - CVE-2026-9923 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2482975 - CVE-2026-10020 chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
  • BZ - 2483023 - CVE-2026-9909 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2483035 - CVE-2026-10012 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2483045 - CVE-2026-9893 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2483056 - CVE-2026-9981 chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia
  • BZ - 2483062 - CVE-2026-9998 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2483070 - CVE-2026-10011 chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia
  • BZ - 2483103 - CVE-2026-9892 chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia
  • BZ - 2483108 - CVE-2026-9983 chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia
  • BZ - 2483114 - CVE-2026-10009 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2484949 - CVE-2026-10985 chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
  • BZ - 2484981 - CVE-2026-10993 chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
  • BZ - 2484992 - CVE-2026-11024 chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia
  • BZ - 2485015 - CVE-2026-11121 chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
  • BZ - 2485036 - CVE-2026-11057 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2485043 - CVE-2026-11124 chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
  • BZ - 2485071 - CVE-2026-11039 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2485081 - CVE-2026-11159 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2485236 - CVE-2026-10977 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2485289 - CVE-2026-10925 chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia
  • BZ - 2485352 - CVE-2026-10941 chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia
  • BZ - 2485638 - CVE-2026-11099 chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia
  • BZ - 2486642 - CVE-2026-11663 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2486644 - CVE-2026-11675 chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
  • BZ - 2495548 - CVE-2026-13841 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2495557 - CVE-2026-13971 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2495595 - CVE-2026-13820 chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
  • BZ - 2495605 - CVE-2026-13885 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2495660 - CVE-2026-13781 chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
  • BZ - 2496263 - CVE-2026-14414 chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
  • BZ - 2496264 - CVE-2026-14389 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2496275 - CVE-2026-14387 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  • BZ - 2496282 - CVE-2026-14410 chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia
  • BZ - 2496283 - CVE-2026-14419 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2496304 - CVE-2026-14429 chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
  • BZ - 2496308 - CVE-2026-14427 chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
  • BZ - 2500647 - CVE-2026-15766 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2500689 - CVE-2026-15774 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2505966 - CVE-2026-16417 chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Skia
  • BZ - 2508687 - CVE-2026-17702 chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia
  • BZ - 2508726 - CVE-2026-17757 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2508773 - CVE-2026-17914 chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia
  • BZ - 2508809 - CVE-2026-17992 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2508884 - CVE-2026-17745 chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
  • BZ - 2508941 - CVE-2026-17712 chromium-browser: skia: chromium-browser: skia: Race in Skia
  • BZ - 2508949 - CVE-2026-17771 chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  • BZ - 2508987 - CVE-2026-17653 chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  • BZ - 2512341 - CVE-2026-19160 chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome
  • BZ - 2523847 - CVE-2026-79112 chromium-browser: skia: chromium-browser: Out of bounds read in Skia
  • BZ - 2523904 - CVE-2026-78914 chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia
  • BZ - 2523912 - CVE-2026-79147 chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome
  • BZ - 2523958 - CVE-2026-78958 chromium-browser: skia: chromium-browser: Uninitialized resource in Skia
  • BZ - 2524104 - CVE-2026-79144 chromium-browser: skia: chromium-browser: Information leak in Skia
  • BZ - 2524577 - CVE-2026-65333 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2527168 - CVE-2026-84359 chromium-browser: skia: chromium-browser: Information leak in Skia
  • BZ - 2534705 - CVE-2026-91733 chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation
  • BZ - 2534759 - CVE-2026-91740 chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia
  • BZ - 2543588 - CVE-2026-102325 chromium-browser: skia: chromium-browser: Uninitialized resource in Skia
  • BZ - 2545277 - CVE-2026-103629 chromium-browser: skia: Integer overflow in Skia
  • BZ - 2546915 - CVE-2026-106379 chromium-browser: skia: Uninitialized resource in Skia
  • BZ - 2547009 - CVE-2026-106399 chromium-browser: skia: Out of bounds read in Skia
  • BZ - 2556522 - CVE-2026-113106 chromium-browser: skia: Memory corruption in Skia
  • BZ - 2562464 - CVE-2026-118348 chromium-browser: skia: Improper input validation in Skia
  • BZ - 2562477 - CVE-2026-118351 chromium-browser: skia: Memory corruption in Skia
  • BZ - 2562479 - CVE-2026-118340 chromium-browser: skia: Memory corruption in Skia
  • BZ - 2562486 - CVE-2026-118354 chromium-browser: skia: Improper input validation in Skia
  • BZ - 2562496 - CVE-2026-118319 chromium-browser: skia: Memory corruption in Skia
  • BZ - 2563744 - CVE-2026-119271 chromium-browser: skia: Uninitialized resource in Skia
  • BZ - 2563759 - CVE-2026-119261 chromium-browser: skia: Buffer overflow in Skia
  • RHEL-271317 - webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9

CVEs

  • CVE-2023-4860
  • CVE-2024-7966
  • CVE-2024-8193
  • CVE-2024-8198
  • CVE-2024-8636
  • CVE-2024-9123
  • CVE-2025-0436
  • CVE-2025-0444
  • CVE-2026-3538
  • CVE-2026-3931
  • CVE-2026-4460
  • CVE-2026-5870
  • CVE-2026-6298
  • CVE-2026-6364
  • CVE-2026-7353
  • CVE-2026-7920
  • CVE-2026-7923
  • CVE-2026-7949
  • CVE-2026-8510
  • CVE-2026-8579
  • CVE-2026-9892
  • CVE-2026-9893
  • CVE-2026-9909
  • CVE-2026-9923
  • CVE-2026-9981
  • CVE-2026-9983
  • CVE-2026-9998
  • CVE-2026-10009
  • CVE-2026-10011
  • CVE-2026-10012
  • CVE-2026-10020
  • CVE-2026-10925
  • CVE-2026-10941
  • CVE-2026-10977
  • CVE-2026-10985
  • CVE-2026-10993
  • CVE-2026-11024
  • CVE-2026-11039
  • CVE-2026-11057
  • CVE-2026-11099
  • CVE-2026-11121
  • CVE-2026-11124
  • CVE-2026-11159
  • CVE-2026-11663
  • CVE-2026-11675
  • CVE-2026-13781
  • CVE-2026-13820
  • CVE-2026-13841
  • CVE-2026-13885
  • CVE-2026-13971
  • CVE-2026-14387
  • CVE-2026-14389
  • CVE-2026-14410
  • CVE-2026-14414
  • CVE-2026-14419
  • CVE-2026-14427
  • CVE-2026-14429
  • CVE-2026-15766
  • CVE-2026-15774
  • CVE-2026-16417
  • CVE-2026-17653
  • CVE-2026-17702
  • CVE-2026-17712
  • CVE-2026-17745
  • CVE-2026-17757
  • CVE-2026-17771
  • CVE-2026-17914
  • CVE-2026-17992
  • CVE-2026-19160
  • CVE-2026-65333
  • CVE-2026-78914
  • CVE-2026-78958
  • CVE-2026-79112
  • CVE-2026-79144
  • CVE-2026-79147
  • CVE-2026-84359
  • CVE-2026-91733
  • CVE-2026-91740
  • CVE-2026-102325
  • CVE-2026-103629
  • CVE-2026-106379
  • CVE-2026-106399
  • CVE-2026-113106
  • CVE-2026-118319
  • CVE-2026-118340
  • CVE-2026-118348
  • CVE-2026-118351
  • CVE-2026-118354
  • CVE-2026-119261
  • CVE-2026-119271

References

  • https://access.redhat.com/security/updates/classification/#critical
Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 9

SRPM
webkit2gtk3-2.54.2-2.el9_9.src.rpm SHA-256: 9bb8031b790a156719ac3799a79ae9c0de76b7258a568f7c41dc9811f782e3d9
x86_64
webkit2gtk3-2.54.2-2.el9_9.i686.rpm SHA-256: 54c57fd8488fe63c4f70b8ddca0ffcc8f9edfd1d1b61504f1aca346c58074fa8
webkit2gtk3-2.54.2-2.el9_9.x86_64.rpm SHA-256: 71e739712630a9e81055fdecb00fa3452d834f3643162dea39f4657cf65b5c79
webkit2gtk3-debuginfo-2.54.2-2.el9_9.i686.rpm SHA-256: 6b4c07cb2df861d8b4d2ad53f79b045eaeb7d91a1ee1c03da34f77ccb6d62395
webkit2gtk3-debuginfo-2.54.2-2.el9_9.x86_64.rpm SHA-256: 28b386ba66deae8800625b92a67d54307968c5199defb84d27a83fd24dbdf6fa
webkit2gtk3-debugsource-2.54.2-2.el9_9.i686.rpm SHA-256: d7941ab5e8975374886aa6f435b08c92d3a50141e45e63d4340d28284e0d31c4
webkit2gtk3-debugsource-2.54.2-2.el9_9.x86_64.rpm SHA-256: 1569761bec6d57db848766da7d0f853645202bdcde7beb6d0a5416174f576551
webkit2gtk3-devel-2.54.2-2.el9_9.i686.rpm SHA-256: 0da1469a1f870ae56d74460efbfa7ae64d68a5c6d0131abecc81da76f3bf6eba
webkit2gtk3-devel-2.54.2-2.el9_9.x86_64.rpm SHA-256: 5067e0ea84b16478836b0bf76327d8354e3d685f1d9a35f4ef3c0feca65f8ace
webkit2gtk3-devel-debuginfo-2.54.2-2.el9_9.i686.rpm SHA-256: 185481519bb6a04e3ee4e409239b332970e6573e957ea7fe508cb125911465ff
webkit2gtk3-devel-debuginfo-2.54.2-2.el9_9.x86_64.rpm SHA-256: f3f63cb02b2073eaecd257697c7c47db9a51cbe2c5462a7ad083ae94741be366
webkit2gtk3-jsc-2.54.2-2.el9_9.i686.rpm SHA-256: 664a50a513f5256f9fd3dd75fb2ae9c25b0f7997ec75a1d0eefa95ebad431b09
webkit2gtk3-jsc-2.54.2-2.el9_9.x86_64.rpm SHA-256: 31e2b1a09efd9954fe86ea0659aa198b26e0d37334325f20756b720b558b93bc
webkit2gtk3-jsc-debuginfo-2.54.2-2.el9_9.i686.rpm SHA-256: 2a5703c9bc2359579c1ae1552be4157494f157472c23add7adda1c03ea60aba1
webkit2gtk3-jsc-debuginfo-2.54.2-2.el9_9.x86_64.rpm SHA-256: ad0b39eb73d93f41aab2d046f7ad577ba08647b11db75eb83f4c819165b230a0
webkit2gtk3-jsc-devel-2.54.2-2.el9_9.i686.rpm SHA-256: c313965cb797dbc34dcbfe095fed3feea712b2a9d33027e4a852b87e3e559b21
webkit2gtk3-jsc-devel-2.54.2-2.el9_9.x86_64.rpm SHA-256: ee6e223f3abe093274f25b6eb0540ba9bfb9f4b9102f921984f1c06b1528af4a
webkit2gtk3-jsc-devel-debuginfo-2.54.2-2.el9_9.i686.rpm SHA-256: 6fa960f80a1c481e7155e024d9679ec017361bf0b1727016fb668c64881c7bc2
webkit2gtk3-jsc-devel-debuginfo-2.54.2-2.el9_9.x86_64.rpm SHA-256: daf77954203c44686f25efab134b9368cc4923ff6b3520be964cb2764a75f5fd

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
webkit2gtk3-2.54.2-2.el9_9.src.rpm SHA-256: 9bb8031b790a156719ac3799a79ae9c0de76b7258a568f7c41dc9811f782e3d9
s390x
webkit2gtk3-2.54.2-2.el9_9.s390x.rpm SHA-256: 6c33a0fee70f67da34bfcd816823b125b2cd3d6c9c76f7a2d0d41f9ca4c04645
webkit2gtk3-debuginfo-2.54.2-2.el9_9.s390x.rpm SHA-256: 319ba8ae7b6a984a3ecc608b32e86c54cd78bd3d0eee70b4e8fbae1677c1e7c7
webkit2gtk3-debugsource-2.54.2-2.el9_9.s390x.rpm SHA-256: 8a92a159addc7f68dd992e5e5e5851d4367ca05dfecdcf5c69fde7bb2a1714c6
webkit2gtk3-devel-2.54.2-2.el9_9.s390x.rpm SHA-256: a722d27a7fbf16000b08ba81c92dc7b222536bfb3e2cc37e25fe8e7f347aa03b
webkit2gtk3-devel-debuginfo-2.54.2-2.el9_9.s390x.rpm SHA-256: 629a6bae5d7e9d93507c5c5d6f10b407c29efd722859e896a80ea72729f23388
webkit2gtk3-jsc-2.54.2-2.el9_9.s390x.rpm SHA-256: 0e391c4246e0075594d2447d4d1dd36673118f3337f6e579c02a3f64015b209c
webkit2gtk3-jsc-debuginfo-2.54.2-2.el9_9.s390x.rpm SHA-256: 831f4c2443153565a89c8ea8b8f81861150a3d8ba3b04e3ef1de92ebb88db949
webkit2gtk3-jsc-devel-2.54.2-2.el9_9.s390x.rpm SHA-256: e7d4c83501aed04b46d940bd4c0a49e5c43cc791108978a840dad1fb5eb1abc0
webkit2gtk3-jsc-devel-debuginfo-2.54.2-2.el9_9.s390x.rpm SHA-256: 7d6270b6915f8802d644502a19b775be6be340d9c143b4c57964b0ef8999068c

Red Hat Enterprise Linux for Power, little endian 9

SRPM
webkit2gtk3-2.54.2-2.el9_9.src.rpm SHA-256: 9bb8031b790a156719ac3799a79ae9c0de76b7258a568f7c41dc9811f782e3d9
ppc64le
webkit2gtk3-2.54.2-2.el9_9.ppc64le.rpm SHA-256: 822a50e77fe595d33bd412943e3fcde74b29effd426862db52fcb106bf67e8cd
webkit2gtk3-debuginfo-2.54.2-2.el9_9.ppc64le.rpm SHA-256: 2206cb869759954157e6d4249aa9074742a087d241a287014082f4c4eace786d
webkit2gtk3-debugsource-2.54.2-2.el9_9.ppc64le.rpm SHA-256: 7ed504ff238dcda89e2613e59a2b99b49123bcd266cc2af01624d3eb3dff2953
webkit2gtk3-devel-2.54.2-2.el9_9.ppc64le.rpm SHA-256: 672fafa38d93fb829b27dac1b3bd798feb1a6dfd9a701d527689b2f74e0c40f0
webkit2gtk3-devel-debuginfo-2.54.2-2.el9_9.ppc64le.rpm SHA-256: edde4cbce3bc68ad141b0f628a1121bc95e34b8e7eb8ec06677aa07c57e0afcf
webkit2gtk3-jsc-2.54.2-2.el9_9.ppc64le.rpm SHA-256: 7358120641be97fbc390448cd61a8fff9a2771925242f0bff8c632a0127b9fd5
webkit2gtk3-jsc-debuginfo-2.54.2-2.el9_9.ppc64le.rpm SHA-256: 06c163df0dc0064f445340640dbdbbacc0276c29538d1cd1c2e8b7ca687eed80
webkit2gtk3-jsc-devel-2.54.2-2.el9_9.ppc64le.rpm SHA-256: e387ee300889768c93a37db91122c1f5c21d7c8ab624a180aa7330df3a6f1284
webkit2gtk3-jsc-devel-debuginfo-2.54.2-2.el9_9.ppc64le.rpm SHA-256: d2d6fb29c6950a7d726f46b531cde3c88435294f90ffd3220af50d8577823f12

Red Hat Enterprise Linux for ARM 64 9

SRPM
webkit2gtk3-2.54.2-2.el9_9.src.rpm SHA-256: 9bb8031b790a156719ac3799a79ae9c0de76b7258a568f7c41dc9811f782e3d9
aarch64
webkit2gtk3-2.54.2-2.el9_9.aarch64.rpm SHA-256: 8124a975d93971d77ac97c0eed028606b8007a615152af88ef22b2b9013972fc
webkit2gtk3-debuginfo-2.54.2-2.el9_9.aarch64.rpm SHA-256: 9837eb1816941c4eecda440fbd9dac41642db9340681184c6617b486d88018e0
webkit2gtk3-debugsource-2.54.2-2.el9_9.aarch64.rpm SHA-256: 8afd5fb1dbcbfaaad702d3d9473dd51517d544ae2184e38b510e3fc4d1a917bb
webkit2gtk3-devel-2.54.2-2.el9_9.aarch64.rpm SHA-256: a328e86a6af9558f8327dfd14813f49160e0961778df8f5433e1f75d67479edf
webkit2gtk3-devel-debuginfo-2.54.2-2.el9_9.aarch64.rpm SHA-256: 2f8ea112fec230c5eb9cc6c5e06ad8ff8d9fd3c4967e6723f41870f8f90593e3
webkit2gtk3-jsc-2.54.2-2.el9_9.aarch64.rpm SHA-256: 4b283ccae6b5214fdef977965badee7711ed7e1208a6a8345ecba4e9a52a2c93
webkit2gtk3-jsc-debuginfo-2.54.2-2.el9_9.aarch64.rpm SHA-256: bd17f5eb1808402a251f3514ad28ea8c15ee7ae83444d6013a1abeeb55a3e7db
webkit2gtk3-jsc-devel-2.54.2-2.el9_9.aarch64.rpm SHA-256: 5cfd6e5e2b0fbb978a12c8c0dacab14a4edc13e0c67a02bc5940896334c32df9
webkit2gtk3-jsc-devel-debuginfo-2.54.2-2.el9_9.aarch64.rpm SHA-256: 8db97166c66d1e58786094033d19528f1832f0bd9c8e13d86fd7e7db7e249b01

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility