Page 1 of 1

webkitgtk flawed

Posted: 9. Jan 2016, 10:38
by elcore
This probably needs an update, maybe a major security flaw by the looks of it.

http://webkitgtk.org/security/WSA-2015-0002.html

Re: webkitgtk flawed

Posted: 11. Jan 2016, 23:37
by gapan
Sadly, it's not possible to update webkit. Webkit 2.2.x is not updated anymore by webkit devs. Newer versions won't even compile in 14.1. Even if they did, it would mean breaking every single application that requires webkit.

Re: webkitgtk flawed

Posted: 12. Jan 2016, 16:03
by Van_Vinkle
Does this mean that the use of midori (version 0.3.3 in salix 13.37) is dangerous?

Re: webkitgtk flawed

Posted: 13. Jan 2016, 23:58
by gapan
Not necessarily, but I would say that using firefox which is regularly updated is a safer choice.

Re: webkitgtk flawed

Posted: 19. Feb 2016, 16:44
by elcore
So this has finally hit the news.
Still no word about qtwebkitpart that comes with KDE and is used in plasma extensively, guess it's safe to assume it's not going to get fixed there either.

Re: webkitgtk flawed

Posted: 20. Feb 2016, 18:13
by gapan
We're probably going to switch completely back to firefox for 14.2...

Re: webkitgtk flawed

Posted: 21. Feb 2016, 02:56
by ChuangTzu
Update: this is the actual blog post from the Gnome/webkit dev.

https://blogs.gnome.org/mcatanzaro/2016 ... y-updates/