Вернуться к предупреждениям о безопасности

Webkit2gtk3 Security Update — AlmaLinux 8 (ALSA-2026:74084)

ALSA-2026:74084 is a massive WebKitGTK catch-up update for AlmaLinux 8, fixing over 150 CVEs (CVE-2023-4860, CVE-2024-7532, CVE-2024-7966 and the full 2024–2026 series through CVE-2026-65351/83596/84635/64753) — Skia use-after-frees, ANGLE out-of-bounds writes, sandbox escapes and memory-safety fixes across the rendering engine, accumulated from many upstream releases. Update with dnf update webkit2gtk3 and restart applications embedding the WebKit view.

Critical 9.6 CVSS Активно эксплуатируется
AlmaLinux 8

Что это значит по лицензии SharedLicense

This is the largest single WebKit catch-up: every 2023–2026 rendering-engine flaw closed at once — crafted web content in any application embedding WebKitGTK goes from a long list of known exploitable flaws to a patched engine.

Type:

security

Severity:

critical

Release date:

2026-11-05

Часто задаваемые вопросы

What is ALSA-2026:74084?
It is AlmaLinux's WebKitGTK catch-up erratum for AlmaLinux 8, applying fixes for over 150 accumulated CVEs (CVE-2023-4860, CVE-2024-7532, CVE-2024-7966, the 2024–2026 Skia/ANGLE/WebGL series, CVE-2026-65331 through CVE-2026-65351 and more) in one package update.
Who is affected?
AlmaLinux 8 systems running applications that embed WebKitGTK — mail clients, document viewers and lightweight browsers. Headless servers without the package are unaffected.
How do I apply the fix?
Run dnf update webkit2gtk3 and restart any application using the WebKit view so it reloads the patched engine.
Why is this update so large?
AlmaLinux 8's WebKitGTK had fallen several upstream releases behind — this erratum applies the entire accumulated security backlog in one pass rather than piecemeal updates.

Проверьте систему на уязвимости

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Проверьте свою систему