Bug#649625: webkit unmaintained security-wise (again)

[Micah Gersten]

On 01/26/2012 12:19 PM, Gustavo Noronha Silva wrote:
> On Thu, 2012-01-26 at 10:03 -0600, Micah Gersten wrote:
>> In Ubuntu, we need to maintain a stable branch of webkitgtk+ for 5 years
>> for our upcoming LTS.  That is from Apr 2012 to Apr 2017.  We'll be
>> using the webkitgtk+ 1.8 branch since it's the most recent with GTK2 and
>> GTK3 support.  I'd like to find other like minded people to help
>> maintain this branch.  I assume that if Debian can standardize on 1.8,
>> that would be helpful for 3.5 years or so (6 months until wheezy
>> releases, 2 yrs of stable, 1 yr of old stable).  How does this sound to
>> people?
> That sounds great to me. Do you have someone in WebKit's security group?
> There are two people nominated but pending approval (Vincent -
> GNOME/SuSE and Josseline - Debian), it would be good to get more distro
> people in there, I think; I'm planning on writing an email asking what
> we could do in order to get those nominations accepted. Would be good to
> have more WebKitGTK+ people in there too, what do you think Martin? =)
>
> Cheers,
>
Yes, we have a few people in the Webkit Security group (including me). 
Here's a link [1] to the criteria for joining the Webkit Security
group.  Basically, you need 3 people to support the new nominees (See #3
under How to Join the WebKit Security Group at [1])

Thanks,
Micah

[1] http://www.webkit.org/security/

-- 
Micah Gersten
Ubuntu Security Team