Todo List: Phasing out qtwebkit

2017-01-20 - Balló György

QtWebKit for Qt 4 has been unmaintained for quite a while, and lots of CVEs have accumulated.

For more information about the WebKit situation, take a look at
https://blogs.gnome.org/mcatanzaro/2016/02/01/on-webkit-security-updates/

To protect our users we should try to limit the packages using qtwebkit, with the goal of eventually getting rid of it completely.

This TODO contains a list of packages which depend (directly or indirectly) on qtwebkit, except:
- if the package depends on kdelibs and it doesn't use the libkdewebkit.so library,
- if the package depends on python{,2}-pyqt4 and it doesn't use the QtWebKit module.

What should be done:
- If the package can be updated to Qt 5, do so.
- Otherwise, if QtWebKit is an optional dependency, build without it.
- Otherwise, consider removing the package, especially if it's a browser.

Updated packages can go straight to extra/community.

If nothing can be done right now, mark the package as completed anyway. We'll be evaluating the situation again after this TODO is through.

Link to lists of pkgbase values:

Filter Todo List Packages

Select filter criteria
34 packages displayed out of 34 total packages.
Arch Repository Name Current Version Staging Version Maintainers Status Last Touched By
x86_64 Community acetoneiso2 2.3-10 lcarlier Complete arojas
x86_64 Extra amarok Complete arojas
any Community anki demize Complete bgyorgy
x86_64 Community bibletime 2.11.2-1 felixonmars Complete felixonmars
x86_64 Community clipgrab arojas Complete arojas
x86_64 Community doublecmd-qt idevolder Complete idevolder
any Community eric-qt4 arcanis Complete arcanis
x86_64 Community fcitx-libpinyin 0.5.3-2 felixonmars Complete bgyorgy
x86_64 Community freecad Complete bluewind
x86_64 Community freemat anthraxx Complete spupykin
x86_64 Community gambas3-gb-qt4-webkit lcarlier Complete bgyorgy
x86_64 Community gambas3-ide 3.14.1-1 3.14.1-2 lcarlier Complete bgyorgy
x86_64 Extra k3b 1:19.08.3-2 arojas Complete arojas
x86_64 Community kbibtex 1:0.9-1 1:0.9-2 schiv, arojas Complete arojas
x86_64 Community kchmviewer 7.7-4 jlichtblau Complete bgyorgy
x86_64 Extra kdelibs Complete arojas
x86_64 Community krecipes Complete bgyorgy
x86_64 Community kvirc Complete spupykin
x86_64 Community lazarus-qt idevolder Complete spupykin
x86_64 Community mixxx 2.2.2-2 lfleischer, dvzrv Complete bgyorgy
any Community ninja-ide Complete bgyorgy
any Community python2-eric-qt4 arcanis Complete arcanis
x86_64 Extra python2-pyqt4 Complete arojas
x86_64 Community python2-pyside Complete bluewind
x86_64 Extra python-pyqt4 Complete arojas
x86_64 Community python-pyside Complete bluewind
x86_64 Community qcad 3.23.0.5-1 idevolder Complete spupykin
x86_64 Community qlandkartegt Complete bgyorgy
x86_64 Community qt4pas Complete idevolder
x86_64 Extra qtscriptgenerator Complete arojas
any Community spyder muflone Complete muflone
any Community spyder3 muflone Complete muflone
x86_64 Community wkhtmltopdf 0.12.5-1 foutrelis Complete foutrelis
x86_64 Community yubikey-neo-manager Complete bgyorgy