[arch-dev-public] Phasing out webkitgtk{,2}

Laurent Carlier lordheavym at gmail.com
Fri Jan 20 09:13:49 UTC 2017


Le mercredi 18 janvier 2017, 22:42:38 CET Jan Alexander Steffens via arch-dev-
public a écrit :
> Hello list,
> 
> WebkitGTK+ 2.4 has been unmaintained for quite a while, and lots of CVEs
> have accumulated. The last release fixing CVEs, 2.4.10, only fixed about
> half the vulnerabilities known, and that release was only made because
> 2.4.9 was broken with GTK+ 3.20, and Evolution quickly needed a working
> HTML renderer.
> 

And we are not alone, fedora and debian are planning the same:
https://bugzilla.redhat.com/show_bug.cgi?id=1375843
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=790216

An issue is already opened for uzbl [1], so i guess a move to aur is 
unavoidable

++

[1] https://github.com/uzbl/uzbl/issues/305

-- 
Laurent Carlier
http://www.archlinux.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.archlinux.org/pipermail/arch-dev-public/attachments/20170120/7368319c/attachment.asc>


More information about the arch-dev-public mailing list