Ubuntu alert USN-7566-1 (webkit2gtk)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7566-1] WebKitGTK vulnerabilities
Date:
             
 
Wed, 11 Jun 2025 22:19:37 +0000
Message-ID:
             
 
<E1uPTnF-0007OB-QD@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7566-1
June 11, 2025

webkit2gtk vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in WebKitGTK.

Software Description:
- webkit2gtk: Web content engine library for GTK+

Details:

Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libjavascriptcoregtk-4.1-0      2.48.3-0ubuntu0.25.04.1
  libjavascriptcoregtk-6.0-1      2.48.3-0ubuntu0.25.04.1
  libwebkit2gtk-4.1-0             2.48.3-0ubuntu0.25.04.1
  libwebkitgtk-6.0-4              2.48.3-0ubuntu0.25.04.1

Ubuntu 24.10
  libjavascriptcoregtk-4.1-0      2.48.3-0ubuntu0.24.10.1
  libjavascriptcoregtk-6.0-1      2.48.3-0ubuntu0.24.10.1
  libwebkit2gtk-4.1-0             2.48.3-0ubuntu0.24.10.1
  libwebkitgtk-6.0-4              2.48.3-0ubuntu0.24.10.1

Ubuntu 24.04 LTS
  libjavascriptcoregtk-4.1-0      2.48.3-0ubuntu0.24.04.1
  libjavascriptcoregtk-6.0-1      2.48.3-0ubuntu0.24.04.1
  libwebkit2gtk-4.1-0             2.48.3-0ubuntu0.24.04.1
  libwebkitgtk-6.0-4              2.48.3-0ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libjavascriptcoregtk-4.0-18     2.48.3-0ubuntu0.22.04.1
  libjavascriptcoregtk-4.1-0      2.48.3-0ubuntu0.22.04.1
  libjavascriptcoregtk-6.0-1      2.48.3-0ubuntu0.22.04.1
  libwebkit2gtk-4.0-37            2.48.3-0ubuntu0.22.04.1
  libwebkit2gtk-4.1-0             2.48.3-0ubuntu0.22.04.1
  libwebkitgtk-6.0-4              2.48.3-0ubuntu0.22.04.1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any applications
that use WebKitGTK, such as Epiphany, to make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7566-1
  CVE-2025-24223, CVE-2025-31204, CVE-2025-31205, CVE-2025-31206,
  CVE-2025-31215, CVE-2025-31257

Package Information:
  https://launchpad.net/ubuntu/+source/webkit2gtk/2.48.3-0u...
  https://launchpad.net/ubuntu/+source/webkit2gtk/2.48.3-0u...
  https://launchpad.net/ubuntu/+source/webkit2gtk/2.48.3-0u...
  https://launchpad.net/ubuntu/+source/webkit2gtk/2.48.3-0u...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmhJ9nYACgkQcpJm3tlz
hgGKAg/+ISx0jvIXCUAvSBsO2PMzgtAuY476wxAkjVpetsK62hhzBA5gsIQOt/r4
omzcfZZSwi0rE+uzD05TMS0PMX0/A6liMhSt6GbvwZnE2MrlQr5qraooOF9O6EyQ
57LabMkVfU7wIuLlqtoiTJFZl9bQmqzkAkOZ7Z+ohkmp9QryM7o2PfwOOdQalR9E
iZf/uSSSuQ5pthnZ4I4bXYTvZ3f1kgB/V+rN8UUV6A/Bad1yX2oC4ljsjjiwQEtr
xyJOGdXkSsU55HiL0WOwW9GMHgc3Eka4wT4vLScotTX8pUo/eomwSn+SZKwHoM3k
tPiLhMoEItNx8CWOYCY+G9gBQcPphb6hZF5pFDRwvJKEgCDfYRIAsPa3rGIkOlNd
MdBfGH6t/ZHHWpWUiuAOFAShn4L9IHj1RtcpBHf0ti7HP+QimxBw4LlqonEvJVJf
i4N5QiOccQuXgQOSvUFdVMCUKH6s4fHlro/je4LNRUILXuJ78PKFzUURAT+6/AdV
ziuhEo89F8A8Ao8xrNYroTj6KmT2v6Wet+54qHsKucqE2PDJjcjaew9igda5B38R
zqPfdd2Moo9n21nYFX/uYbHq2DHmxVmOkdWpnrK7AlJEgCbOzKt427C6DOeRsNUM
mzWN4Ms9Jj4qoSnQ8HTCSZXmVymVk855JJFOpXzKWRats9ILOgE=
=ZZnn
-----END PGP SIGNATURE-----