Bug 1872823

Summary:	Retire this package, and everything that depends on it
Product:	[Fedora] Fedora	Reporter:	Michael Catanzaro <mcatanza>
Component:	qtwebkit	Assignee:	Rex Dieter <rdieter>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	jreznik, kde-sig, kevin, rdieter, than
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-08-26 19:49:35 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Michael Catanzaro 2020-08-26 16:56:01 UTC

qtwebkit is based on original upstream QtWebKit, which died around the time Chromium forked WebKit into Blink. Nobody has tracked how many security bugs have been uncovered in WebKit since that time, but it's going to be more than the qt5-qtwebkit package, which is in dire state (bug #1872819).

We shouldn't have a totally unsandboxed web engine in Fedora that has gone so long with no security updates. I suggest that it's time for this package, and everything that depends on it, to disappear from Fedora. Dependencies should migrate to QtWebEngine if possible, or remove web views entirely if not.

$ repoquery --whatrequires qtwebkit
Last metadata expiration check: 0:09:22 ago on Wed 26 Aug 2020 11:43:11 AM CDT.
OpenSceneGraph-examples-qt-0:3.4.1-16.fc32.x86_64
amarok-0:2.9.0-6.fc32.x86_64
arora-0:0.11.0-22.fc32.x86_64
brewtarget-0:2.1.0-14.fc32.x86_64
gambas3-gb-qt4-webkit-0:3.14.3-2.fc32.x86_64
kde-runtime-libs-0:17.08.3-14.fc32.i686
kde-runtime-libs-0:17.08.3-14.fc32.x86_64
kdelibs-6:4.14.38-20.fc32.i686
kdelibs-6:4.14.38-20.fc32.x86_64
kdelibs-webkit-6:4.14.38-20.fc32.i686
kdelibs-webkit-6:4.14.38-20.fc32.x86_64
knode-libs-0:4.14.10-43.fc32.i686
knode-libs-0:4.14.10-43.fc32.x86_64
krecipes-0:2.1.0-11.fc32.x86_64
ksysguard-libs-1:4.11.22-27.fc32.i686
ksysguard-libs-1:4.11.22-27.fc32.x86_64
libkfbapi-0:1.0-16.fc32.i686
libkfbapi-0:1.0-16.fc32.x86_64
marble-widget-1:15.08.3-62.fc32.i686
marble-widget-1:15.08.3-62.fc32.x86_64
python3-PyQt4-webkit-0:4.12.3-11.fc32.x86_64
qlandkartegt-0:1.8.1-23.fc32.x86_64
qlandkartegt-0:1.8.1-24.fc32.x86_64
qmc2-0:0.195-11.fc32.x86_64
qt-assistant-1:4.8.7-52.fc32.x86_64
qt-assistant-1:4.8.7-55.fc32.x86_64
qt-demos-1:4.8.7-52.fc32.x86_64
qt-demos-1:4.8.7-55.fc32.x86_64
qt-designer-plugin-webkit-1:4.8.7-52.fc32.i686
qt-designer-plugin-webkit-1:4.8.7-52.fc32.x86_64
qt-designer-plugin-webkit-1:4.8.7-55.fc32.i686
qt-designer-plugin-webkit-1:4.8.7-55.fc32.x86_64
qt-examples-1:4.8.7-52.fc32.i686
qt-examples-1:4.8.7-52.fc32.x86_64
qt-examples-1:4.8.7-55.fc32.i686
qt-examples-1:4.8.7-55.fc32.x86_64
qt4pas-0:2.5-20.fc32.i686
qt4pas-0:2.5-20.fc32.x86_64
qtscriptbindings-0:0.2.0-21.fc32.i686
qtscriptbindings-0:0.2.0-21.fc32.x86_64
qtwebkit-devel-0:2.3.4-29.fc32.i686
qtwebkit-devel-0:2.3.4-29.fc32.x86_64
rekonq-0:2.4.2-16.fc32.x86_64
timetablemate-0:0.10-0.24.20111204git.fc32.x86_64
tomahawk-libs-0:0.8.4-23.fc31.i686
tomahawk-libs-0:0.8.4-23.fc31.x86_64

Comment 1 Kevin Kofler 2020-08-26 19:49:35 UTC


*** This bug has been marked as a duplicate of bug 1711519 ***