Back to Security Advisories

Webkit2gtk3 Security Update — AlmaLinux 8 (ALSA-2026:74084)

ALSA-2026:74084 is a massive WebKitGTK catch-up update for AlmaLinux 8, fixing over 150 CVEs (CVE-2023-4860, CVE-2024-7532, CVE-2024-7966 and the full 2024–2026 series through CVE-2026-65351/83596/84635/64753) — Skia use-after-frees, ANGLE out-of-bounds writes, sandbox escapes and memory-safety fixes across the rendering engine, accumulated from many upstream releases. Update with dnf update webkit2gtk3 and restart applications embedding the WebKit view.

Critical 9.6 CVSS Actively exploited
AlmaLinux 8

What this means under a SharedLicense license

This is the largest single WebKit catch-up: every 2023–2026 rendering-engine flaw closed at once — crafted web content in any application embedding WebKitGTK goes from a long list of known exploitable flaws to a patched engine.

Type:

security

Severity:

critical

Release date:

2026-11-05

Frequently Asked Questions

What is ALSA-2026:74084?
It is AlmaLinux's WebKitGTK catch-up erratum for AlmaLinux 8, applying fixes for over 150 accumulated CVEs (CVE-2023-4860, CVE-2024-7532, CVE-2024-7966, the 2024–2026 Skia/ANGLE/WebGL series, CVE-2026-65331 through CVE-2026-65351 and more) in one package update.
Who is affected?
AlmaLinux 8 systems running applications that embed WebKitGTK — mail clients, document viewers and lightweight browsers. Headless servers without the package are unaffected.
How do I apply the fix?
Run dnf update webkit2gtk3 and restart any application using the WebKit view so it reloads the patched engine.
Why is this update so large?
AlmaLinux 8's WebKitGTK had fallen several upstream releases behind — this erratum applies the entire accumulated security backlog in one pass rather than piecemeal updates.

References

Security Advisories

Related Advisories

Qt5-Qtdeclarative Security Update — AlmaLinux 8 (ALSA-2026:96075)

2026-11-10

Webkit2gtk3 Security Update — AlmaLinux 8 (ALSA-2026:96080)

2026-11-09

Util-Linux Security Update — AlmaLinux 8 (ALSA-2026:96212)

2026-11-09

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System