[CLSA-2026:1792402249] webkit2gtk3: Fix of 4 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-19 13:00:31 UTC
Description:
- CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update - CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia - CVE-2026-91733: missing flush failure handling in the Skia GPU backend - CVE-2026-17771: uninitialized texture padding read by Skia linear sampling
Updated packages:
  • webkit2gtk3-2.54.0-1.el9.tuxcare.els13.aarch64.rpm
    sha:1233b01b1556552bafbbd4f7839adf86f1a17fe7a3a4ad483f5a47deb5b12ddd
  • webkit2gtk3-2.54.0-1.el9.tuxcare.els13.x86_64.rpm
    sha:4b3564213fc6dfad4b98f578aaf02fa71582e26b43f90c185edc1544eaac3242
  • webkit2gtk3-devel-2.54.0-1.el9.tuxcare.els13.aarch64.rpm
    sha:690f7b31400b365f8741f87ebf0ddbb09719c6908b7d3133b46c6ad54519e7d6
  • webkit2gtk3-devel-2.54.0-1.el9.tuxcare.els13.x86_64.rpm
    sha:29ed248e6589f3e39e01729f8a1a24ea3f45e7257941fffba11dfbda8e7fe40c
  • webkit2gtk3-jsc-2.54.0-1.el9.tuxcare.els13.aarch64.rpm
    sha:5f91c1ff1211212564363e3f831d7d8503958bc22a8fff4cc11c250e0e43f559
  • webkit2gtk3-jsc-2.54.0-1.el9.tuxcare.els13.x86_64.rpm
    sha:e0c5c2e938b38920cab90b2c456616b08b44711c1ef967cfce01940f4341d07f
  • webkit2gtk3-jsc-devel-2.54.0-1.el9.tuxcare.els13.aarch64.rpm
    sha:13bf23d9fa00287d8d1750e227923eca5eff746816a05b19aa6ec3a608f73878
  • webkit2gtk3-jsc-devel-2.54.0-1.el9.tuxcare.els13.x86_64.rpm
    sha:52a20961d44de37ceaad1724412912680d664cb033b5cc78670f4e81674f793a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.