Comment 3 for bug 1469221

Revision history for this message
Michael Catanzaro (mike-catanzaro) wrote :

Hi, upstream WebKit developer here. I just want to mention that WebKit1 is no longer receiving security updates, so if you only want one version in main, it would be good to use WebKit2 instead if possible. Porting everything to WebKit2 is going to be a years-long process, I'm afraid, though your help could speed that up a lot (thanks!).

(I guess this doesn't make too much difference for you, since I see your WebKit2 package is still on 2.6.2 from last October. Imagine not updating Firefox in that time. Maybe you don't realize, but each new version includes fixes for mistakes that allow web sites to take control of your computer. 2.6.5 includes a fix for a mistake in the TLS code that results in your session cookies being sent to attackers. We are unfortunately very bad at announcing these problems and need to do better. Anyway, the current recommended version is 2.8.3.)