On Thu, 2015-11-05 at 09:53 -0600, Michael Catanzaro wrote: > On Thu, 2015-11-05 at 16:21 +0100, Jos Vos wrote: > > I see that the F23 Xfce live image still includes only Midori as the > > internet browser, similar to the F22 image. > > Midori still depends on an old version of WebKitGTK+, so it has not had > any security updates in a long time. It's irresponsible to ship it > until this is fixed.
WebKitGTK+ 2.4.9 was shipped in May, and 2.4.8 before that in January with a bunch of security fixes, all despite the fact that they had since released 2.6.x and 2.8.x. This tells me that the 2.4 branch, while deprecated, continues to be maintained. -- Yaakov Selkowitz Associate Software Engineer, ARM Red Hat, Inc. -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
