Ubuntu USN · USN-8237-1

WebKitGTK vulnerabilities

Published: Wed, 06 May 2026 13:29

CVE-2026-20644CVE-2026-20665CVE-2026-20652CVE-2026-20676CVE-2026-28859CVE-2026-20643CVE-2026-20664CVE-2026-28861CVE-2026-20691CVE-2026-28857CVE-2026-20635CVE-2026-20608CVE-2025-43214CVE-2025-43457CVE-2026-20636CVE-2025-43511CVE-2025-46299CVE-2026-28871CVE-2025-43213

Summary

Several security issues were fixed in WebKitGTK.

Details

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

Recommended actions per Ubuntu release

StackPatch playbook auto-generated per release codename and per affected package.

Ubuntu noble

webkit2gtk→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y webkit2gtk
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-javascriptcoregtk-4.1→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-javascriptcoregtk-4.1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-javascriptcoregtk-6.0→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-javascriptcoregtk-6.0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-webkit-6.0→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-webkit-6.0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-webkit2-4.1→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-webkit2-4.1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-4.0-bin→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-4.0-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-4.1-0→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-4.1-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-4.1-dev→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-4.1-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-6.0-1→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-6.0-1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-6.0-dev→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-6.0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-bin→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkit2gtk-4.0-doc→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkit2gtk-4.0-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkit2gtk-4.1-0→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkit2gtk-4.1-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkit2gtk-4.1-dev→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkit2gtk-4.1-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-6.0-4→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-6.0-4
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-6.0-dev→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-6.0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-doc→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
webkit2gtk-driver→2.52.3-0ubuntu0.24.04.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.24.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y webkit2gtk-driver
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu questing

webkit2gtk→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y webkit2gtk
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-javascriptcoregtk-4.1→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-javascriptcoregtk-4.1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-javascriptcoregtk-6.0→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-javascriptcoregtk-6.0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-webkit-6.0→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-webkit-6.0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-webkit2-4.1→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-webkit2-4.1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-4.0-bin→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-4.0-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-4.1-0→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-4.1-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-4.1-dev→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-4.1-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-6.0-1→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-6.0-1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-6.0-dev→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-6.0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-bin→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkit2gtk-4.0-doc→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkit2gtk-4.0-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkit2gtk-4.1-0→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkit2gtk-4.1-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkit2gtk-4.1-dev→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkit2gtk-4.1-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-6.0-4→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-6.0-4
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-6.0-dev→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-6.0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-doc→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
webkit2gtk-driver→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y webkit2gtk-driver
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
webkitgtk-webdriver→2.52.3-0ubuntu0.25.10.1apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.25.10.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y webkitgtk-webdriver
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu resolute

webkit2gtk→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y webkit2gtk
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-javascriptcoregtk-4.1→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-javascriptcoregtk-4.1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-javascriptcoregtk-6.0→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-javascriptcoregtk-6.0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-webkit-6.0→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-webkit-6.0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
gir1.2-webkit2-4.1→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y gir1.2-webkit2-4.1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-4.1-0→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-4.1-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-4.1-dev→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-4.1-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-6.0-1→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-6.0-1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-6.0-dev→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-6.0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libjavascriptcoregtk-bin→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libjavascriptcoregtk-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkit2gtk-4.1-0→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkit2gtk-4.1-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkit2gtk-4.1-dev→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkit2gtk-4.1-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-6.0-4→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-6.0-4
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-6.0-dev→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-6.0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwebkitgtk-doc→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwebkitgtk-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
webkitgtk-webdriver→2.52.3-0ubuntu0.26.04.2apt_upgrade
Standard apt upgrade. Install 2.52.3-0ubuntu0.26.04.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y webkitgtk-webdriver
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Are YOU affected by USN-8237-1?

5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8237-1 (and any other live CVE) applies. Anonymous, no signup.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Read the bash source first

Want this automated for your servers?

StackPatch runs this match against YOUR installed packages every hour

Free 1-server / $99 lifetime founder seat (50 only) / $19+/mo monthly. Indie pricing.

Buy lifetime →See StackPatch →Live audit log →