Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-26 Thread Soren Stoutner
On Sunday, December 24, 2023 3:50:26 AM MST Adrian Bunk wrote: > > If it ends up not being feasible to backport the entire Qt WebEngine from > > the next LTS release, then we could look at cherry-picking all of the > > security commits. This would be, by far, the most time-intensive solution. > > B

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-21 Thread Dmitry Shachnev
Hi Soren, On Thu, Dec 21, 2023 at 12:48:44PM -0700, Soren Stoutner wrote: > On Thursday, December 21, 2023 3:00:23 AM MST Dmitry Shachnev wrote: > > Just one particular class (QQuickWebEngineDownloadItem) is private. My guess > > is that it’s upstream oversight, because upstream documentation even

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-21 Thread Dmitry Shachnev
On Wed, Dec 20, 2023 at 02:06:28PM -0700, Soren Stoutner wrote: > I must admit that I have no personal experience with connecting QML and C++. I don’t have any personal experience with that too. > But it seems to me from the documentation Qt has produced there are several > ways to bridge the two

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-20 Thread Dmitry Shachnev
Hi Soren! On Wed, Dec 20, 2023 at 12:23:15PM -0700, Soren Stoutner wrote: > On Wednesday, December 20, 2023 7:01:47 AM MST Dmitry Shachnev wrote: > > Using a stub header results in dependency on private ABI just like including > > a normal header. > > I wonder if that just happens for the QML ver

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-20 Thread Dmitry Shachnev
On Mon, Dec 18, 2023 at 10:34:17AM -0700, Soren Stoutner wrote: > Adrian, > > On Sunday, December 17, 2023 3:11:10 AM MST Adrian Bunk wrote: > > I don't know what's going on with the headers, but there is a reason why > > the dependency gets generated: > > > > $ nm -D /usr/bin/angelfish-webapp |

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-20 Thread Dmitry Shachnev
Hi Soren! On Sat, Dec 16, 2023 at 04:33:58PM -0700, Soren Stoutner wrote: > On Saturday, December 16, 2023 4:10:42 PM MST Adrian Bunk wrote: > > On Sat, Dec 16, 2023 at 01:22:13PM -0700, Soren Stoutner wrote: > > > Bookworm released with qtwebengine-opensource-src 5.15.8+dfsg-1, but > > > 5.15.13+

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-16 Thread Patrick Franz
Hej, Am Sonntag, 17. Dezember 2023, 00:33:58 CET schrieb Soren Stoutner: [...] > > No matter what angelfish does, qtwebview-opensource-src will in any > > case also need a rebuild. > > Qt WebView is deprecated upstream. It was based on the same Apple > WebKit source that WebViewGTK uses. It was

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-14 Thread Paul Gevers
Hi Soren, On 14-12-2023 08:45, Soren Stoutner wrote: How do you recommend we change that? I think you're having the right discussion. I'm not a Stable Release Manager so I don't feel authoritative about stable. However, in my *personal* opinion and reflected in a proposal [1] I'm driving (ab

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-13 Thread Mike Gabriel
Hi everyone, On Do 14 Dez 2023 00:38:29 CET, Soren Stoutner wrote: Patrick, On Wednesday, December 13, 2023 3:00:23 PM MST Patrick Franz wrote: Don't forget that the open-source Qt LTS releases are delayed by a year. I wasn’t aware of that. Can you please elaborate on how that timeline wo

Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-13 Thread Paul Gevers
Hi Soren, On 14-12-2023 04:49, Soren Stoutner wrote: Currently there is no real security support for Qt WebEngine in stable, which is an oversight that might surprise many Debian users. It's explicitly documented in the release notes: https://www.debian.org/releases/bookworm/amd64/release-not