ubuntustudio-bugs team mailing list archive

[Michael Catanzaro <mcatanzaro@xxxxxxxxx>]

Hi, upstream WebKit developer here. I just want to mention that WebKit1
is no longer receiving security updates, so if you only want one version
in main, it would be good to use WebKit2 instead if possible. Porting
everything to WebKit2 is going to be a years-long process, I'm afraid,
though your help could speed that up a lot (thanks!).

(I guess this doesn't make too much difference for you, since I see your
WebKit2 package is still on 2.6.2 from last October. Imagine not
updating Firefox in that time. Maybe you don't realize, but each new
version includes fixes for mistakes that allow web sites to take control
of your computer. 2.6.5 includes a fix for a mistake in the TLS code
that results in your session cookies being sent to attackers. We are
unfortunately very bad at announcing these problems and need to do
better. Anyway, the current recommended version is 2.8.3.)

-- 
You received this bug notification because you are a member of Ubuntu
Studio Bugs, which is subscribed to shotwell in Ubuntu.
Matching subscriptions: Ubuntu Studio Bugs
https://bugs.launchpad.net/bugs/1469221

Title:
  Move to webkit2gtk in main

Status in Shotwell:
  Confirmed
Status in apturl package in Ubuntu:
  Fix Released
Status in shotwell package in Ubuntu:
  New
Status in webkit2gtk package in Ubuntu:
  New
Status in webkitgtk package in Ubuntu:
  New

Bug description:
  Look at porting things to the new webkit2 API. Upstream has dropped
  wk1 and so webkitgtk is not receiving updates any more.

  We should aim to move webkit2gtk to main and webkitgtk to universe,
  eventually removing it once everything is ported.

  Reverse-Depends
  ===============
  * apturl                        (for gir1.2-webkit-3.0)
  * empathy                       (for libwebkitgtk-3.0-0)
  * evolution                     (for libwebkitgtk-3.0-0)
  * evolution-dev                 (for libwebkitgtk-3.0-dev)
  * libdevhelp-3-2                (for libwebkit2gtk-3.0-25)
  * libdevhelp-dev                (for libwebkit2gtk-3.0-dev)
  * libevolution                  (for libwebkitgtk-3.0-0)
  * libgoa-backend-1.0-1          (for libwebkitgtk-3.0-0)
  * librhythmbox-core9            (for libwebkitgtk-3.0-0)
  * libwebkit1.1-cil              (for libwebkitgtk-1.0-0)
  * libyelp-dev                   (for libwebkitgtk-3.0-dev)
  * libyelp0                      (for libwebkitgtk-3.0-0)
  * rhythmbox-plugins             (for gir1.2-webkit-3.0)
  * shotwell                      (for libwebkitgtk-3.0-0)
  * software-center               (for gir1.2-webkit-3.0)
  * ubiquity-frontend-gtk         (for gir1.2-webkit-3.0)
  * ubuntu-release-upgrader-gtk   (for gir1.2-webkit-3.0)
  * unity-control-center          (for libwebkitgtk-3.0-0)
  * yelp                          (for libwebkitgtk-3.0-0)
  * zenity                        (for libwebkitgtk-3.0-0)

To manage notifications about this bug go to:
https://bugs.launchpad.net/shotwell/+bug/1469221/+subscriptions