Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:25927

Опубликовано: 17 июн. 2026
Источник: rocky
Оценка: Important

Описание

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)

  • webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)

  • webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)

  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)

  • webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
webkit2gtk3i6861.el9_8webkit2gtk3-2.52.4-1.el9_8.i686.rpm
webkit2gtk3x86_641.el9_8webkit2gtk3-2.52.4-1.el9_8.x86_64.rpm
webkit2gtk3-develi6861.el9_8webkit2gtk3-devel-2.52.4-1.el9_8.i686.rpm
webkit2gtk3-develx86_641.el9_8webkit2gtk3-devel-2.52.4-1.el9_8.x86_64.rpm
webkit2gtk3-jsci6861.el9_8webkit2gtk3-jsc-2.52.4-1.el9_8.i686.rpm
webkit2gtk3-jscx86_641.el9_8webkit2gtk3-jsc-2.52.4-1.el9_8.x86_64.rpm
webkit2gtk3-jsc-develi6861.el9_8webkit2gtk3-jsc-devel-2.52.4-1.el9_8.i686.rpm
webkit2gtk3-jsc-develx86_641.el9_8webkit2gtk3-jsc-devel-2.52.4-1.el9_8.x86_64.rpm

Показывать по

Связанные CVE

CVE-2026-28847
CVE-2026-28883
CVE-2026-28901
CVE-2026-28902
CVE-2026-28903
CVE-2026-28904
CVE-2026-28905
CVE-2026-28907
CVE-2026-28942
CVE-2026-28946
CVE-2026-28947
CVE-2026-28953
CVE-2026-28955
CVE-2026-28958
CVE-2026-43658
CVE-2026-43660

Ссылки на источники

Исправления

Связанные уязвимости

suse-cvrf логотип

SUSE-SU-2026:2378-1

suse-cvrf
около 2 месяцев назад

Security update for webkit2gtk3

suse-cvrf логотип

SUSE-SU-2026:2376-1

suse-cvrf
около 2 месяцев назад

Security update for webkit2gtk3

rocky логотип

RLSA-2026:25918

rocky
около 2 месяцев назад

Important: webkit2gtk3 security update

oracle-oval логотип

ELSA-2026-25918

oracle-oval
около 2 месяцев назад

ELSA-2026-25918: webkit2gtk3 security update (IMPORTANT)

redhat логотип

CVE-2026-28847

CVSS3: 8.8
redhat
2 месяца назад

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.