An update for webkitgtk is now available for openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3771 Final 1.0 1.0 2026-09-14 Initial 2026-09-14 2026-09-14 openEuler SA Tool V1.0 2026-09-14 webkitgtk security update An update for webkitgtk is now available for openEuler-20.03-LTS-SP4 WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 3. Security Fix(es): A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. The vulnerability exists in the findFeature function of OpenTypeVerticalData, which fails to properly validate the full featurelist array.(CVE-2026-83596) An update for webkitgtk is now available for openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High webkitgtk https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3771 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-83596 https://nvd.nist.gov/vuln/detail/CVE-2026-83596 openEuler-20.03-LTS-SP4 webkit2gtk3-2.22.2-15.oe2003sp4.aarch64.rpm webkit2gtk3-debuginfo-2.22.2-15.oe2003sp4.aarch64.rpm webkit2gtk3-debugsource-2.22.2-15.oe2003sp4.aarch64.rpm webkit2gtk3-devel-2.22.2-15.oe2003sp4.aarch64.rpm webkit2gtk3-jsc-2.22.2-15.oe2003sp4.aarch64.rpm webkit2gtk3-jsc-devel-2.22.2-15.oe2003sp4.aarch64.rpm webkit2gtk3-2.22.2-15.oe2003sp4.src.rpm webkit2gtk3-2.22.2-15.oe2003sp4.x86_64.rpm webkit2gtk3-debuginfo-2.22.2-15.oe2003sp4.x86_64.rpm webkit2gtk3-debugsource-2.22.2-15.oe2003sp4.x86_64.rpm webkit2gtk3-devel-2.22.2-15.oe2003sp4.x86_64.rpm webkit2gtk3-jsc-2.22.2-15.oe2003sp4.x86_64.rpm webkit2gtk3-jsc-devel-2.22.2-15.oe2003sp4.x86_64.rpm webkit2gtk3-help-2.22.2-15.oe2003sp4.noarch.rpm A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. The vulnerability exists in the findFeature function of OpenTypeVerticalData, which fails to properly validate the full featurelist array. 2026-09-14 CVE-2026-83596 openEuler-20.03-LTS-SP4 High 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H webkitgtk security update 2026-09-14 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3771