WebKit security holes haunt Ubuntu