diff --git a/extra/wpewebkit/.SRCINFO b/extra/wpewebkit/.SRCINFO
index 1027f0311..89eb56da5 100644
--- a/extra/wpewebkit/.SRCINFO
+++ b/extra/wpewebkit/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = wpewebkit
 	pkgdesc = Embeddable web content engine
-	pkgver = 2.42.4
-	pkgrel = 2
+	pkgver = 2.42.5
+	pkgrel = 1
 	url = https://wpewebkit.org
 	arch = x86_64
 	license = custom
@@ -55,13 +55,13 @@ pkgbase = wpewebkit
 	depends = wpebackend-fdo
 	depends = xdg-dbus-proxy
 	depends = zlib
-	source = https://wpewebkit.org/releases/wpewebkit-2.42.4.tar.xz
-	source = https://wpewebkit.org/releases/wpewebkit-2.42.4.tar.xz.asc
+	source = https://wpewebkit.org/releases/wpewebkit-2.42.5.tar.xz
+	source = https://wpewebkit.org/releases/wpewebkit-2.42.5.tar.xz.asc
 	validpgpkeys = D7FCF61CF9A2DEAB31D81BD3F3D322D0EC4582C3
 	validpgpkeys = 5AA3BC334FD7E3369E7C77B291C559DBE4C9123B
-	sha256sums = 8836040a3687581970b47a232b713e7023c080d5613427f52db619c29fb253a4
+	sha256sums = 4dbab6c5e6dc0c65a3d7dffc1c2390be5f9abd423faf983fe3a55fe081df0532
 	sha256sums = SKIP
-	b2sums = cfce325c574a738c5c7c8b14365d4d07496bc62b54d67d1d1e82b7f497f747ef886ea418ab199d6cbb8c6ac5df76db5b5a092d98abbb95874f11e621241dfeff
+	b2sums = a90431053235ae2ab90aeedec6a888a9aac80e691b05470448ffca9220dd4d28c479638708e250921521fd0d079f84027b528608cb8c0aed99bf9d7b9c68d3f8
 	b2sums = SKIP
 
 pkgname = wpewebkit
diff --git a/extra/wpewebkit/PKGBUILD b/extra/wpewebkit/PKGBUILD
index 5b9230bef..bba422d02 100644
--- a/extra/wpewebkit/PKGBUILD
+++ b/extra/wpewebkit/PKGBUILD
@@ -8,8 +8,8 @@ pkgname=(
   wpewebkit
   wpewebkit-docs
 )
-pkgver=2.42.4
-pkgrel=2
+pkgver=2.42.5
+pkgrel=1
 pkgdesc="Embeddable web content engine"
 url="https://wpewebkit.org"
 arch=(x86_64)
@@ -71,9 +71,9 @@ makedepends=(
 source=(
   $url/releases/wpewebkit-$pkgver.tar.xz{,.asc}
 )
-sha256sums=('8836040a3687581970b47a232b713e7023c080d5613427f52db619c29fb253a4'
+sha256sums=('4dbab6c5e6dc0c65a3d7dffc1c2390be5f9abd423faf983fe3a55fe081df0532'
             'SKIP')
-b2sums=('cfce325c574a738c5c7c8b14365d4d07496bc62b54d67d1d1e82b7f497f747ef886ea418ab199d6cbb8c6ac5df76db5b5a092d98abbb95874f11e621241dfeff'
+b2sums=('a90431053235ae2ab90aeedec6a888a9aac80e691b05470448ffca9220dd4d28c479638708e250921521fd0d079f84027b528608cb8c0aed99bf9d7b9c68d3f8'
         'SKIP')
 validpgpkeys=(
   'D7FCF61CF9A2DEAB31D81BD3F3D322D0EC4582C3'  # Carlos Garcia Campos <cgarcia@igalia.com>
@@ -107,6 +107,10 @@ build() {
   #export CC=clang CXX=clang++
   #LDFLAGS+=" -fuse-ld=lld"
 
+  # JITted code crashes when CET is used
+  #CFLAGS+=' -fcf-protection=none'
+  #CXXFLAGS+=' -fcf-protection=none'
+
   # Produce minimal debug info: 4.3 GB of debug data makes the
   # build too slow and is too much to package for debuginfod
   CFLAGS+=' -g1'