QtWebkit will be removed from openSUSE Tumbleweed soon

1 Jul 2021

      Hello,

QtWebKit was a rendering engine for web content released with Qt until 5.6. It 
was replaced with QtWebEngine after that.

Despite a community fork in 2016, nothing really happened to keep it alive and 
secure.
Quoting the QtWebKit release page on Github:

"WARNING: This release is based on old WebKit revision with known unpatched 
vulnerabilities.
Please use it carefully and avoid visiting untrusted websites and using it for 
transmission of sensitive data."

It's time to drop it from openSUSE Tumbleweed.

The good news, most QtWebKit remaining users were just caused by obsolete 
'BuildRequires'. Most were cleaned during the week end.

Pending SRs:
- FreeCAD (SR#902666 replaces the dependency)
- qgis (SR#903291 disables the optional dependency)
- owncloud-client (it needs an unrelated code fix)
- notepadqq (SR#903352 replaces the old version with a git snapshot)

Packages that could use snapshots:
- quiterss
  The upstream website looks down. There are 2 github repo (QuiteRSS/quiterss2 
and QuiteRSS/quiterss). Both don't have hard dependency on QtWebKit.
- leechcraft
  Last release in 2014. We're already using snapshots. QtWebKit looks 
optional.

The less good news, a couple packages also have to be dropped.

KDE packages that will be dropped:
- trojita (no activity upstream)
- kwebkitpart
- kdewebkit

Packages with no upstream activity and/or no alternative port:
- wkhtmltopdf which is a dependency for python-hide-code and python-pdfkit
- swift-im
- smtube
- goldendict

Christophe

Christophe Giboudeaux

tags

participants (12)