Back Linuxsecurity Ubuntu 25.10: WebKitGTK Critical RCE & DoS Advisory USN-7895
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in WebKitGTK. Software Description: - webkit2gtk: Web content engine library for GTK+ Details: Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in WebKitGTK. Software Description: - webkit2gtk: Web content engine library for GTK+ Details: Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libjavascriptcoregtk-4.1-0 2.50.1-0ubuntu0.25.10.1 libjavascriptcoregtk-6.0-1 2.50.1-0ubuntu0.25.10.1 libwebkit2gtk-4.1-0 2.50.1-0ubuntu0.25.10.1 libwebkitgtk-6.0-4 2.50.1-0ubuntu0.25.10.1 Ubuntu 25.04 libjavascriptcoregtk-4.1-0 2.50.1-0ubuntu0.25.04.2 libjavascriptcoregtk-6.0-1 2.50.1-0ubuntu0.25.04.2 libwebkit2gtk-4.1-0 2.50.1-0ubuntu0.25.04.2 libwebkitgtk-6.0-4 2.50.1-0ubuntu0.25.04.2 Ubuntu 24.04 LTS libjavascriptcoregtk-4.1-0 2.50.1-0ubuntu0.24.04.1 libjavascriptcoregtk-6.0-1 2.50.1-0ubuntu0.24.04.1 libwebkit2gtk-4.1-0 2.50.1-0ubuntu0.24.04.1 libwebkitgtk-6.0-4 2.50.1-0ubuntu0.24.04.1 Ubuntu 22.04 LTS libjavascriptcoregtk-4.0-18 2.50.1-0ubuntu0.22.04.1 libjavascriptcoregtk-4.1-0 2.50.1-0ubuntu0.22.04.1 libjavascriptcoregtk-6.0-1 2.50.1-0ubuntu0.22.04.1 libwebkit2gtk-4.0-37 2.50.1-0ubuntu0.22.04.1 libwebkit2gtk-4.1-0 2.50.1-0ubuntu0.22.04.1 libwebkitgtk-6.0-4 2.50.1-0ubuntu0.22.04.1 This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK, such as Epiphany, to make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libjavascriptcoregtk-4.1-0 2.50.1-0ubuntu0.25.10.1 libjavascriptcoregtk-6.0-1 2.50.1-0ubuntu0.25.10.1 libwebkit2gtk-4.1-0 2.50.1-0ubuntu0.25.10.1 libwebkitgtk-6.0-4 2.50.1-0ubuntu0.25.10.1 Ubuntu 25.04 libjavascriptcoregtk-4.1-0 2.50.1-0ubuntu0.25.04.2 libjavascriptcoregtk-6.0-1 2.50.1-0ubuntu0.25.04.2 libwebkit2gtk-4.1-0 2.50.1-0ubuntu0.25.04.2 libwebkitgtk-6.0-4 2.50.1-0ubuntu0.25.04.2 Ubuntu 24.04 LTS libjavascriptcoregtk-4.1-0 2.50.1-0ubuntu0.24.04.1 libjavascriptcoregtk-6.0-1 2.50.1-0ubuntu0.24.04.1 libwebkit2gtk-4.1-0 2.50.1-0ubuntu0.24.04.1 libwebkitgtk-6.0-4 2.50.1-0ubuntu0.24.04.1 Ubuntu 22.04 LTS libjavascriptcoregtk-4.0-18 2.50.1-0ubuntu0.22.04.1 libjavascriptcoregtk-4.1-0 2.50.1-0ubuntu0.22.04.1 libjavascriptcoregtk-6.0-1 2.50.1-0ubuntu0.22.04.1 libwebkit2gtk-4.0-37 2.50.1-0ubuntu0.22.04.1 libwebkit2gtk-4.1-0 2.50.1-0ubuntu0.22.04.1 libwebkitgtk-6.0-4 2.50.1-0ubuntu0.22.04.1 This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK, such as Epiphany, to make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
