Webkit2gtk3 Security Update — AlmaLinux 8 (ALSA-2026:74084)

ALSA-2026:74084 is a massive WebKitGTK catch-up update for AlmaLinux 8, fixing over 150 CVEs (CVE-2023-4860, CVE-2024-7532, CVE-2024-7966 and the full 2024–2026 series through CVE-2026-65351/83596/84635/64753) — Skia use-after-frees, ANGLE out-of-bounds writes, sandbox escapes and memory-safety fixes across the rendering engine, accumulated from many upstream releases. Update with dnf update webkit2gtk3 and restart applications embedding the WebKit view.

Critical 9.6 CVSS Aktiv ausgenutzt 2026-11-05

AlmaLinux 8

Was das unter einer SharedLicense-Lizenz bedeutet

This is the largest single WebKit catch-up: every 2023–2026 rendering-engine flaw closed at once — crafted web content in any application embedding WebKitGTK goes from a long list of known exploitable flaws to a patched engine.

Type:

security

Severity:

critical

Release date:

2026-11-05

Häufig gestellte Fragen

What is ALSA-2026:74084?

It is AlmaLinux's WebKitGTK catch-up erratum for AlmaLinux 8, applying fixes for over 150 accumulated CVEs (CVE-2023-4860, CVE-2024-7532, CVE-2024-7966, the 2024–2026 Skia/ANGLE/WebGL series, CVE-2026-65331 through CVE-2026-65351 and more) in one package update.

Who is affected?

AlmaLinux 8 systems running applications that embed WebKitGTK — mail clients, document viewers and lightweight browsers. Headless servers without the package are unaffected.

How do I apply the fix?

Run dnf update webkit2gtk3 and restart any application using the WebKit view so it reloads the patched engine.

Why is this update so large?

AlmaLinux 8's WebKitGTK had fallen several upstream releases behind — this erratum applies the entire accumulated security backlog in one pass rather than piecemeal updates.

Referenzen

Sicherheitshinweise

System auf Schwachstellen prüfen

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

System prüfen

Häufig gestellte Fragen

Verwandte Warnhinweise

System auf Schwachstellen prüfen