Move to webkit2gtk in main
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
| Shotwell |
Fix Released
|
Medium
|
||
| apturl (Ubuntu) |
Undecided
|
Unassigned | ||
| shotwell (Ubuntu) |
Undecided
|
Unassigned | ||
| software-center (Ubuntu) |
Undecided
|
Iain Lane | ||
| webkit2gtk (Ubuntu) |
Undecided
|
Unassigned | ||
| webkitgtk (Ubuntu) |
Undecided
|
Sebastien Bacher |
Bug Description
Look at porting things to the new webkit2 API. Upstream has dropped wk1 and so webkitgtk is not receiving updates any more.
We should aim to move webkit2gtk to main and webkitgtk to universe, eventually removing it once everything is ported.
Reverse-Depends
===============
* apturl (for gir1.2-webkit-3.0)
* empathy (for libwebkitgtk-3.0-0)
* evolution (for libwebkitgtk-3.0-0)
* evolution-dev (for libwebkitgtk-
* libdevhelp-3-2 (for libwebkit2gtk-
* libdevhelp-dev (for libwebkit2gtk-
* libevolution (for libwebkitgtk-3.0-0)
* libgoa-
* librhythmbox-core9 (for libwebkitgtk-3.0-0)
* libwebkit1.1-cil (for libwebkitgtk-1.0-0)
* libyelp-dev (for libwebkitgtk-
* libyelp0 (for libwebkitgtk-3.0-0)
* rhythmbox-plugins (for gir1.2-webkit-3.0)
* shotwell (for libwebkitgtk-3.0-0)
* software-center (for gir1.2-webkit-3.0)
* ubiquity-
* ubuntu-
* unity-control-
* yelp (for libwebkitgtk-3.0-0)
* zenity (for libwebkitgtk-3.0-0)
Related branches
- Iain Lane (community): Approve on 2016-02-17
- software-store-developers: Pending requested 2015-07-14
-
Diff: 857 lines (+151/-293)11 files modifieddebian/control (+1/-1)
run-tests.sh (+2/-2)
softwarecenter/ui/gtk3/dialogs/dialog_tos.py (+15/-10)
softwarecenter/ui/gtk3/views/purchaseview.py (+22/-51)
softwarecenter/ui/gtk3/widgets/exhibits.py (+36/-36)
softwarecenter/ui/gtk3/widgets/videoplayer.py (+20/-79)
softwarecenter/ui/gtk3/widgets/webkit.py (+45/-67)
tests/gtk3/test_purchase.py (+0/-24)
tests/gtk3/test_webkit.py (+8/-18)
tests/gtk3/test_widgets.py (+1/-1)
tests/gtk3/windows.py (+1/-4)
- Mathieu Trudel-Lapierre: Approve on 2016-02-16
- Sebastien Bacher (community): Approve on 2016-02-12
-
Diff: 191 lines (+53/-27)5 files modifiedd-i/manifest (+9/-9)
d-i/update-control (+1/-1)
debian/changelog (+10/-0)
debian/control (+2/-2)
ubiquity/frontend/gtk_ui.py (+31/-15)
- Sebastien Bacher: Approve on 2016-01-14
- Unity Control Center development team: Pending requested 2016-01-13
-
Diff: 114 lines (+40/-27)3 files modifiedconfigure.ac (+1/-1)
debian/control (+1/-1)
panels/info/cc-info-panel.c (+38/-25)
Changed in shotwell: | |
importance: | Unknown → Medium |
status: | Unknown → Confirmed |
Iain Lane (laney) wrote : | #2 |
BTW I don't think this is going to happen for 15.10 - upstreams haven't fully caught up with this yet.
I'm working on ports but we won't be able to support two webkits in main so things need to remain wk1 compatible until we switch.
Michael Catanzaro (mike-catanzaro) wrote : | #3 |
Hi, upstream WebKit developer here. I just want to mention that WebKit1 is no longer receiving security updates, so if you only want one version in main, it would be good to use WebKit2 instead if possible. Porting everything to WebKit2 is going to be a years-long process, I'm afraid, though your help could speed that up a lot (thanks!).
(I guess this doesn't make too much difference for you, since I see your WebKit2 package is still on 2.6.2 from last October. Imagine not updating Firefox in that time. Maybe you don't realize, but each new version includes fixes for mistakes that allow web sites to take control of your computer. 2.6.5 includes a fix for a mistake in the TLS code that results in your session cookies being sent to attackers. We are unfortunately very bad at announcing these problems and need to do better. Anyway, the current recommended version is 2.8.3.)
Michael Catanzaro (mike-catanzaro) wrote : | #4 |
Also, as a warning, it is a huge task to port one of the email clients. There is upstream work on editor API to make it a bit easier.
Changed in software-center (Ubuntu): | |
status: | New → In Progress |
assignee: | nobody → Iain Lane (laney) |
Launchpad Janitor (janitor) wrote : | #5 |
Status changed to 'Confirmed' because the bug affects multiple users.
Changed in shotwell (Ubuntu): | |
status: | New → Confirmed |
Changed in webkit2gtk (Ubuntu): | |
status: | New → Confirmed |
Changed in webkitgtk (Ubuntu): | |
status: | New → Confirmed |
Steve Langasek (vorlon) wrote : | #8 |
The devhelp package in main has just dropped the delta to use webkitgtk instead of webkit2gtk:
https:/
Laney, what's the status of this bug? Is this transition moving forward for xenial? Do we need an MIR for webkit2gtk or just a committment to remove webkitgtk from main in favor of w2g? Should we pre-promote webkit2gtk to main to unblock things like devhelp, and mark this a critical bug against webkitgtk?
Iain Lane (laney) wrote : | #9 |
Hi Steve,
I just reuploaded webkit to put the dependencies back to the version of WK2 shipped by webkitgtk in main.
The status of this bug is that we aren't actively working on it, although it is still a goal. Some of the packages are very difficult to port, not least the email clients, and would be best done by the upstream developers.
I put a note to myself to have another look in a few weeks. It may be possible to demote some of the rdepends (for example evolution and empathy) which could make the remaining set tractable for us to handle.
Cheers,
Iain
Tim Lunn (darkxst) wrote : | #10 |
How about another angle, we drop the ancient webkit2gtk build from webkitgtk source and add webkit2gtk to main? thats gotta be better than the current situation, and the transition from webkit2gtk-3.0 to -4.0 should be easy
Iain Lane (laney) wrote : | #11 |
I've just spent a while pushing on this again. I think it's going to be possible.
ppa:laney/wk2 contains staged uploads.
Reverse-
=======
* sphinx (for gir1.2-webkit-3.0) # unused, remove
Reverse-
=======
* devhelp (for libwebkit2gtk-
* empathy (for libwebkitgtk-
* evolution (for libwebkitgtk-
* gnome-online-
* libproxy (for libwebkitgtk-
* libproxy (for libjavascriptco
* rhythmbox (for libwebkitgtk-
* shotwell (for libwebkitgtk-
* ubiquity (for gir1.2-webkit-3.0) # Ported, MPed
* unity-control-
* webapps-
* yelp (for libwebkitgtk-
* zenity (for libwebkitgtk-
Additionally, there is
Reverse-Depends
===============
* apturl (for gir1.2-webkit-3.0) # ported
* software-center (for gir1.2-webkit-3.0) # ported, MPed (possibly needs more testing)
* ubuntu-
Launchpad Janitor (janitor) wrote : | #12 |
This bug was fixed in the package software-center - 16.01+16.
---------------
software-center (16.01+
* Port to WebKit 2 (LP: #1469221)
-- Iain Lane <email address hidden> Wed, 17 Feb 2016 13:47:38 +0000
Changed in software-center (Ubuntu): | |
status: | In Progress → Fix Released |
FWIW:
# enable certificates validation in webkit views unless specified otherwise
if "SOFTWARE_
# WARN the user!! Do not remove this
Is not accurate, you are still going to have encryption. It just might be an encrypted connection to some attacker. :)
Iain Lane (laney) wrote : | #14 |
Thanks Michael ;-)
https:/
The real reason I came to this bug is to mark the tasks Fix Released. Ubuntu's "main" is going to be webkit2 only shortly. The desktop image (a subset of main) already is. This still leaves both versions in Ubuntu as a whole of course - webkit 1 is only going to Universe.
Changed in shotwell (Ubuntu): | |
status: | Confirmed → Fix Released |
Changed in webkit2gtk (Ubuntu): | |
status: | Confirmed → Fix Released |
Changed in webkitgtk (Ubuntu): | |
assignee: | nobody → Sebastien Bacher (seb128) |
Nik Soams (fuj63904) wrote : | #15 |
@Iain Lane
Great progress! Only one "webkit1" package in default is: libqt5webkit!
signon-ui-x11(http://
Can it be resolved so new LTS wont be released with known webkit1 bugs/security exploits?
Changed in webkitgtk (Ubuntu): | |
status: | Confirmed → Fix Released |
Robert Ancell (robert-ancell) wrote : | #16 |
Bug 1588150 opened to track the future removal of webkitgtk
Changed in shotwell: | |
status: | Confirmed → Fix Released |
This bug was fixed in the package apturl - 0.5.2ubuntu8
---------------
apturl (0.5.2ubuntu8) wily; urgency=medium
* Use webkit2 in addition to webkit1. (LP: #1469221)
-- Iain Lane <email address hidden> Tue, 30 Jun 2015 12:59:59 +0100