Release date:
2026-09-25 10:11:08 UTC
Description:
- Rebase to webkitgtk 2.54.0, moving this branch onto the release Red Hat ships
for the same two flaws (webkit2gtk3-2.54.0-1.el9_8, RHSA-2026:69098).
- CVE-2026-19173: out-of-bounds write in Skia, reachable from a compromised
renderer process; fixed by the rebase to 2.54.0
- CVE-2026-19154: use-after-free in Skia, reachable from a compromised renderer
process; fixed by the rebase to 2.54.0
- Adopt the CentOS Stream 9 2.54.0 packaging patch set verbatim; skia-s390x.patch
and mimalloc.patch are new there for 2.54.0.
- Drop fix-renderflexbox-typename.patch (was Patch17); the code it patched is
gone on 2.54.0.
Updated packages:
-
webkit2gtk3-2.54.0-1.el9_6.tuxcare.els7.aarch64.rpm
sha:bed4e4f3d9c9d1eec43f415422a7882548ced60e70b3d4ab0391b7c4163bd594
-
webkit2gtk3-2.54.0-1.el9_6.tuxcare.els7.x86_64.rpm
sha:a0763cfcaf629aebef441dcb5ecced121ad2c588728c00b4681735746f6924ac
-
webkit2gtk3-devel-2.54.0-1.el9_6.tuxcare.els7.aarch64.rpm
sha:435a893a1960cce0500e1a984504b1061accbe48951160330747cc0e2742cbd9
-
webkit2gtk3-devel-2.54.0-1.el9_6.tuxcare.els7.x86_64.rpm
sha:fe46ab30a9685c6c78d4e542ae8c80ed1277bf227dace81ffda691cc9d517d20
-
webkit2gtk3-jsc-2.54.0-1.el9_6.tuxcare.els7.aarch64.rpm
sha:2b7260b065a217d4d65f8d0c21500f980b12a33fd8e5341e423806b0514abb96
-
webkit2gtk3-jsc-2.54.0-1.el9_6.tuxcare.els7.x86_64.rpm
sha:ddc36643f5f2afd3156ccf7bacda81947efae65c111de0410230dd53b5643da3
-
webkit2gtk3-jsc-devel-2.54.0-1.el9_6.tuxcare.els7.aarch64.rpm
sha:b44a003550e3f4680bc8df6ef3099e2cb00798ce0651fe5b713ba6b06f4f9cb3
-
webkit2gtk3-jsc-devel-2.54.0-1.el9_6.tuxcare.els7.x86_64.rpm
sha:085fa0c01b33101867925b3d24bf1b77f10bd9c8685417ad02a52bda59d1b9dd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
