QtWebKit in Qt5.6+ in Debian

[Florian Bruhin]

* Kevin Krammer <kevin.krammer at gmx.at> [2015-06-25 18:35:41 +0200]:
> On Thursday, 2015-06-25, 15:56:22, Florian Bruhin wrote:
> > * Lisandro Damián Nicanor Pérez Meyer <perezmeyer at gmail.com> [2015-06-25 
> 09:49:29 -0300]:
> > > On Thursday 25 June 2015 14:13:59 Florian Bruhin wrote:
> 
> > > > Seeing that Qt removes QtWebKit from their source-
> > > 
> > > Actually they are not going to update it anymore, maybe except for
> > > security
> > > bugfixes. The source will remain there and should be able to keep building
> > > with Qt5.6+
> > 
> > I'm not entirely sure it will, unfortunately.
> > 
> > From [1]:
> > 
> > * We’d still remove the deprecated modules from our Qt 5.6 release
> >   (maybe with the exception of Qt Script).
> > 
> > I also remember reading somewhere explicitely that it won't be
> > included in the qt-everywhere-opensource-... archive - sadly I can't
> > find the mail anymore.
> 
> I would be surprised if it got removed from anything other than the binary 
> packages.
> It might be something that one has to opt-in to at configure time, but I don't 
> see any gain in basically breaking the compatibility guarantee.
> 
> The whole point of "deprecated" is to mark something for future removal 
> instead of removing it.
> 
> And as far as I know no Qt API, let alone a whole module, has ever been 
> removed in a point release. Only major releases do that if at all.

The argument of the Qt people on their development mailing list[1]
essentially boils down to "you can still use old versions of QtWebKit
with a newer Qt, so it's source-compatible".

Or at least that's how I understand what's being said there so far.
(I disagree)

[1] http://lists.qt-project.org/mailman/listinfo/development

> > I still have some hope - I think Qt will still apply at least security
> > fixes for QtWebKit until Qt 6, which still should be a while away.
> 
> I would also be surprised if they would knowingly ship insecure code.

I wouldn't call it *knowingly* - but chances are slim that someone
will take care of security issues until there's a bug report - and
even then, I guess it depends on the ressources Qt is willing to
allocate to QtWebKit (which seems to be dropping at a fast rate the
past few months).

Florian

-- 
http://www.the-compiler.org | me at the-compiler.org (Mail/XMPP)
   GPG: 916E B0C8 FD55 A072 | http://the-compiler.org/pubkey.asc
         I love long mails! | http://email.is-not-s.ms/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-kde-talk/attachments/20150625/bea4a65e/attachment.sig>