Thanks Jeremy!

The GStreamer issue is unfortunate indeed, although it comes to mind that it is not as important for Debian, since gstreamer-libav is available in Debian and YouTube still provides non-MSE H.264 video. So low-quality video will still be available, which is a lot better than no video. This was not the best example for me to have used yesterday.

But equally problematic is the Debian security team's lack of interest in allowing updates to the security-critical WebKitGTK+ package, which is currently vulnerable to issues since WSA-2018-0003 [1]. I've been complaining about this for about three years now, and it's clear that the situation is irreconcilable with Debian's package stability policies. Although *very happy* with Debian's packaging in testing and unstable, the stable package is old, insufficient for the modern web, unsafe to use for its intended purpose, and really only serves to harm users' impression of Epiphany. Web browsers are special, and Debian's conservative packaging rules simply do not work here. So long as Debian maintains its position of not updating WebKitGTK+ in stable, it is harmful for it to remain in the stable distro.

Michael

[1] https://webkitgtk.org/security.html

Reply via email to