[CLSA-2026:1790805563] webkit2gtk3: Fix of 7 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-06 11:54:11 UTC
Description:
- CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update - CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia - CVE-2026-91733: missing flush failure handling in the Skia GPU backend - CVE-2026-17771: uninitialized texture padding read by Skia linear sampling
Updated packages:
  • webkit2gtk3-2.54.0-1.el9_6.tuxcare.els8.aarch64.rpm
    sha:7d1e0111efd5fa482323240fe687f93a93ffbf2ce45e4e1cab60c8312a8bbb84
  • webkit2gtk3-2.54.0-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:2a83fc2b325c9676f01ca9b9f3fd13c0e40d1c0b5d7fdf71ccaa40a5b83555f7
  • webkit2gtk3-devel-2.54.0-1.el9_6.tuxcare.els8.aarch64.rpm
    sha:5272c64a8432d59d88b1a5773f79087d55ca869d6028dd69af8d8a4263a68bf3
  • webkit2gtk3-devel-2.54.0-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:9baa881d7751b432acb0e5848dde04e73ba7bf2a6af5398c88aba673cc2b40aa
  • webkit2gtk3-jsc-2.54.0-1.el9_6.tuxcare.els8.aarch64.rpm
    sha:a50fbbfb2468029a7e3b41a17231d43fb4a7c8163a285c3f0e68bfab9310fe18
  • webkit2gtk3-jsc-2.54.0-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:8afb0d86a9f6797997182d289f46c97a1b170edfe0b1fac098288ae9816ccc64
  • webkit2gtk3-jsc-devel-2.54.0-1.el9_6.tuxcare.els8.aarch64.rpm
    sha:bed4d6547b15c417220831286177d0edd3c1f823fe7e1afcfc09392503275856
  • webkit2gtk3-jsc-devel-2.54.0-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:d48cad33a9101815933dddd85774634d91dc1bca5ccd71b9f1ae00c27d30de99
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.