On Thu, 2015-11-05 at 09:53 -0600, Michael Catanzaro wrote:
On Thu, 2015-11-05 at 16:21 +0100, Jos Vos wrote:
> I see that the F23 Xfce live image still includes only Midori as the
> internet browser, similar to the F22 image.
Midori still depends on an old version of WebKitGTK+, so it has not had
any security updates in a long time. It's irresponsible to ship it
until this is fixed.
WebKitGTK+ 2.4.9 was shipped in May, and 2.4.8 before that in January
with a bunch of security fixes, all despite the fact that they had since
released 2.6.x and 2.8.x. This tells me that the 2.4 branch, while
deprecated, continues to be maintained.
--
Yaakov Selkowitz
Associate Software Engineer, ARM
Red Hat, Inc.