Todo List: Phasing out webkitgtk{,2}

2017-01-19 - Jan Steffens

WebkitGTK+ 2.4 has been unmaintained for quite a while, and lots of CVEs have accumulated. The last release fixing CVEs, 2.4.10, only fixed about half the vulnerabilities known, and that release was only made because 2.4.9 was broken with GTK+ 3.20, and Evolution quickly needed a working HTML renderer.

For more information about the WebKit situation, take a look at
https://blogs.gnome.org/mcatanzaro/2016/02/01/on-webkit-security-updates/

To protect our users we should try to limit the packages using webkitgtk(2), with the goal of eventually getting rid of it completely.

This TODO contains a list of packages which depend (directly or indirectly) on webkitgtk or webkitgtk2.

If the package can be updated to webkit2gtk, do so.
Otherwise, if WebKit is an optional dependency, build without it.
Otherwise, consider removing the package, especially if it's a browser.

Updated packages can go straight to extra/community.

If nothing can be done right now, mark the package as completed anyway. We'll be evaluating the situation again after this TODO is through.

Link to lists of pkgbase values:

Filter Todo List Packages

Select filter criteria
72 packages displayed out of 72 total packages.
Arch Repository Name Current Version Staging Version Maintainers Status Last Touched By
x86_64 Community apvlv Complete bgyorgy
any Community arista Complete bgyorgy
x86_64 Community atril 1.20.2-1 cesura Complete arojas
x86_64 Community balsa 2.5.6-1 jlichtblau Complete bgyorgy
any Community blam Complete bgyorgy
x86_64 Community boinc 7.12-1 fyan Complete bgyorgy
x86_64 Community cairo-dock-plug-ins 3.4.1-11 alucryd Complete alucryd
x86_64 Extra claws-mail 3.17.1-1 andyrtr Complete andyrtr
x86_64 Community codeblocks 17.12-4 bgyorgy Complete bgyorgy
x86_64 Community dwb Complete jgc
x86_64 Extra eclipse-common heftig Complete heftig
x86_64 Extra eclipse-cpp heftig Complete heftig
x86_64 Extra eclipse-java heftig Complete heftig
x86_64 Extra eclipse-jee heftig Complete heftig
x86_64 Extra eclipse-php heftig Complete heftig
x86_64 Extra empathy 3.25.90+34+g78f4d4fda-3 heftig Complete heftig
x86_64 Community geany-plugins 1.33-3 arodseth Complete arodseth
x86_64 Community geary 0.12.4-1 alucryd Complete alucryd
x86_64 Extra gimp 2.10.6-2 anthraxx, eworm Complete arojas
any Community gimp-help-ca 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-da 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-de 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-el 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-en 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-en_gb 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-es 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-fr 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-it 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-ja 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-ko 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-nl 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-nn 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-pt_br 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-ru 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-sl 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-sv 2.8.2-5 muflone Complete bgyorgy
any Community gimp-help-zh_cn 2.8.2-5 muflone Complete bgyorgy
x86_64 Community gnome-web-photo Complete bgyorgy
x86_64 Extra gnucash bgyorgy Complete bgyorgy
x86_64 Community gphpedit Complete spupykin
any Community gramps 2:5.0.0-1 bgyorgy Complete spupykin
x86_64 Community gtkpod Complete arojas
x86_64 Community guitarix2 0.37.3-2 dvzrv Complete bgyorgy
x86_64 Extra java-openjfx 8.u172-2 guillaume Complete guillaume
x86_64 Extra java-openjfx-doc 8.u172-2 guillaume Complete guillaume
x86_64 Extra java-openjfx-src 8.u172-2 guillaume Complete guillaume
x86_64 Extra liferea 1.12.5-3 lcarlier Complete bgyorgy
x86_64 Community luakit Complete arodseth
x86_64 Community midori 0.5.11-8 arodseth Complete arodseth
x86_64 Community midori-gtk2 Complete arodseth
x86_64 Community moneymanagerex 1.3.3-2 jlichtblau Complete bgyorgy
x86_64 Extra mono-tools 4.2-1 anthraxx Complete jgc
x86_64 Community osmo 0.4.2-3 jlichtblau Complete bgyorgy
any Community pdfsam 3.3.7-1 arcanis Complete bgyorgy
x86_64 Community perl-gtk2-webkit Complete bgyorgy
x86_64 Community pywebkitgtk Complete bgyorgy
x86_64 Community scratch-text-editor Complete alucryd
any Community screenlets 0.1.7-2 bgyorgy Complete bgyorgy
any Community screenlets-pack-basic 0.1.7-3 bgyorgy Complete bgyorgy
any Community sparkleshare 3.28-2 bgyorgy Complete bgyorgy
x86_64 Community startdde 3.1.35.4-1 fyan, FFY00 Complete fyan
x86_64 Community surf 2.0-1 lfleischer Complete bgyorgy
x86_64 Extra swt 4.6.2-3 guillaume Complete heftig
x86_64 Community uzbl-browser Complete bgyorgy
x86_64 Community uzbl-core Complete bgyorgy
x86_64 Community uzbl-tabbed Complete bgyorgy
any Community variety 0.7.0-1 jlichtblau Complete bgyorgy
x86_64 Community webkitgtk-sharp Complete bgyorgy
x86_64 Extra webkit-sharp Complete jgc
x86_64 Extra wxgtk2 3.0.4-2 Complete bgyorgy
x86_64 Extra wxpython Complete bgyorgy
x86_64 Community xombrero Complete kkeen