A security notice (USN-7941-1) has been issued for Ubuntu and its derivatives, affecting systems including Ubuntu 25.10, 25.04, 24.04 LTS, and 22.04 LTS. Several vulnerabilities have been discovered in WebKitGTK, a library for web content, which could allow remote attackers to exploit cross-site scripting attacks, denial of service attacks, and arbitrary code execution. To fix these issues, users need to update their systems to the latest package versions, which include new upstream releases with additional bug fixes. After updating, applications that use WebKitGTK, such as Epiphany, may require a restart to apply the necessary changes.

[USN-7941-1] WebKitGTK vulnerabilities

[USN-7941-1] WebKitGTK vulnerabilities

==========================================================================
Ubuntu Security Notice USN-7941-1
January 05, 2026

webkit2gtk vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 25.04
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in WebKitGTK.

Software Description:
- webkit2gtk: Web content engine library for GTK+

Details:

Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
libjavascriptcoregtk-4.1-0 2.50.3-0ubuntu0.25.10.1
libjavascriptcoregtk-6.0-1 2.50.3-0ubuntu0.25.10.1
libwebkit2gtk-4.1-0 2.50.3-0ubuntu0.25.10.1
libwebkitgtk-6.0-4 2.50.3-0ubuntu0.25.10.1

Ubuntu 25.04
libjavascriptcoregtk-4.1-0 2.50.3-0ubuntu0.25.04.1
libjavascriptcoregtk-6.0-1 2.50.3-0ubuntu0.25.04.1
libwebkit2gtk-4.1-0 2.50.3-0ubuntu0.25.04.1
libwebkitgtk-6.0-4 2.50.3-0ubuntu0.25.04.1

Ubuntu 24.04 LTS
libjavascriptcoregtk-4.1-0 2.50.3-0ubuntu0.24.04.1
libjavascriptcoregtk-6.0-1 2.50.3-0ubuntu0.24.04.1
libwebkit2gtk-4.1-0 2.50.3-0ubuntu0.24.04.1
libwebkitgtk-6.0-4 2.50.3-0ubuntu0.24.04.1

Ubuntu 22.04 LTS
libjavascriptcoregtk-4.0-18 2.50.3-0ubuntu0.22.04.1
libjavascriptcoregtk-4.1-0 2.50.3-0ubuntu0.22.04.1
libjavascriptcoregtk-6.0-1 2.50.3-0ubuntu0.22.04.1
libwebkit2gtk-4.0-37 2.50.3-0ubuntu0.22.04.1
libwebkit2gtk-4.1-0 2.50.3-0ubuntu0.22.04.1
libwebkitgtk-6.0-4 2.50.3-0ubuntu0.22.04.1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any applications
that use WebKitGTK, such as Epiphany, to make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7941-1
CVE-2025-13947, CVE-2025-43421, CVE-2025-43458, CVE-2025-66287

Package Information:
https://launchpad.net/ubuntu/+source/webkit2gtk/2.50.3-0ubuntu0.25.10.1
https://launchpad.net/ubuntu/+source/webkit2gtk/2.50.3-0ubuntu0.25.04.1
https://launchpad.net/ubuntu/+source/webkit2gtk/2.50.3-0ubuntu0.24.04.1
https://launchpad.net/ubuntu/+source/webkit2gtk/2.50.3-0ubuntu0.22.04.1