Linux · AlmaLinux · Security advisory · September 30, 2026

ALSA-2026:74084: Security update for 4 packages

ALSA-2026:74084, released September 30, 2026, fixes 324 CVEs across 4 products. One of them is being exploited (CVE-2026-3909); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
324
65 rated Critical
Exploited
1
CVE-2026-3909
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.0995
95th percentile

Priority of the 324 CVEs

Patch now 1 Urgent 65 High 258 Routine 0

Fixed package versions

ProductReleaseFixed in
webkit2gtk3almalinux 82.54.0-1.el8_10
webkit2gtk3-develalmalinux 82.54.0-1.el8_10
webkit2gtk3-jscalmalinux 82.54.0-1.el8_10
webkit2gtk3-jsc-develalmalinux 82.54.0-1.el8_10

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2026-3909 Chromium: CVE-2026-3909 Out of bounds write in Skia9.6 0.0233 KEVExploited
Urgent CVE-2026-10881 Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE9.6 0.0063 None reported
Urgent CVE-2026-78904 Chromium: CVE-2026-78904 Type confusion in ANGLE9.6 0.0062 None reported
Urgent CVE-2026-78989 Chromium: CVE-2026-78989 Out of bounds read in ANGLE9.6 0.0056 None reported
Urgent CVE-2026-17687 Chromium: CVE-2026-17687 Type Confusion in ANGLE9.6 0.0056 None reported
Urgent CVE-2026-17655 Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE9.6 0.0055 None reported
Urgent CVE-2026-17697 Chromium: CVE-2026-17697 Type Confusion in ANGLE9.6 0.0055 None reported
Urgent CVE-2026-17671 Chromium: CVE-2026-17671 Insufficient validation of untrusted input in ANGLE9.6 0.0051 None reported
Urgent CVE-2026-17682 Chromium: CVE-2026-17682 Integer overflow in ANGLE9.6 0.0051 None reported
Urgent CVE-2026-17704 Chromium: CVE-2026-17704 Use after free in ANGLE9.6 0.0051 None reported
Urgent CVE-2026-17717 Chromium: CVE-2026-17717 Integer overflow in ANGLE9.6 0.0051 None reported
Urgent CVE-2026-17676 Chromium: CVE-2026-17676 Inappropriate implementation in ANGLE9.6 0.0049 None reported
Urgent CVE-2026-79282 chromium: Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute ar...9.6 0.0048 None reported
Urgent CVE-2026-79131 Chromium: CVE-2026-79131 Out of bounds write in ANGLE9.6 0.0048 None reported
Urgent CVE-2026-79149 Chromium: CVE-2026-79149 Use after free in ANGLE9.6 0.0048 None reported
Urgent CVE-2026-79188 Chromium: CVE-2026-79188 Out of bounds write in ANGLE9.6 0.0048 None reported
Urgent CVE-2026-79275 Chromium: CVE-2026-79275 Use after free in ANGLE9.6 0.0048 None reported
Urgent CVE-2026-79019 Chromium: CVE-2026-79019 Out of bounds write in ANGLE9.6 0.0048 None reported
Urgent CVE-2026-17691 Chromium: CVE-2026-17691 Out of bounds write in ANGLE9.6 0.0048 None reported
Urgent CVE-2026-17695 Chromium: CVE-2026-17695 Inappropriate implementation in ANGLE9.6 0.0048 None reported
Urgent CVE-2026-17701 Chromium: CVE-2026-17701 Out of bounds read in ANGLE9.6 0.0047 None reported
Urgent CVE-2026-13885 Chromium: CVE-2026-13885 Use after free in Skia9.6 0.0046 None reported
Urgent CVE-2026-79043 Chromium: CVE-2026-79043 Out of bounds write in ANGLE9.6 0.0046 None reported
Urgent CVE-2026-17718 Chromium: CVE-2026-17718 Use after free in ANGLE9.6 0.0044 None reported
Urgent CVE-2026-17721 Chromium: CVE-2026-17721 Out of bounds write in ANGLE9.6 0.0044 None reported
Showing 1 to 25 of 324 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.