Ubuntu policy for WebKit security updates?

[Jeremy Bicha]

On Tue, Sep 13, 2016 at 5:14 PM, Adam Dingle <adam at medovina.org> wrote:
> 1. WebKit 1 contains many security vulnerabilities that will probably never
> be fixed, and yet some apps (e.g. Geary, GnuCash) still depend on it.

As of the current 16.10 daily iso's, the only Ubuntu flavor that still
includes WebKit 1 in the default install is Ubuntu Studio (for
guitarix). One obstacle to removing WebKit 1 from the Debian and
Ubuntu repositories completely is that webkit2gtk does not work with
GTK+ 2 apps, like guitarix.

You can see a list of current WebKit 1 apps by running these commands
(all but the last are for GTK+ 2 apps)

apt rdepends libwebkitgtk-1.0-0
apt rdepends libwebkit1.1-cil
apt rdepends python-webkit
apt rdepends libwebkitgtk-3.0-0

Jeremy