| 10 Aug 2025 |
K900 | So uh | 06:17:14 |
K900 | I have a funni | 06:17:16 |
K900 | I can fix links in calamares in the dumbest way possible | 06:17:24 |
| 11 Aug 2025 |
emily | K900: so is anyone actually maintaining Qt 5 WebEngine | 13:20:14 |
emily | I know you said KDE people would pick it up | 13:20:23 |
emily | but I sure am noticing that we are on a version from 4 months ago and I seriously doubt there have not been any CVEs that otherwise would have been backported since then | 13:20:33 |
emily | given the frequency before that https://github.com/qt/qtwebengine/commits/v5.15.19-lts | 13:20:44 |
emily | and I think that is a problem | 13:20:58 |
emily | pretty sure we have browsers using that | 13:21:02 |
K900 | There was some talk but I don't see anything either | 13:22:15 |
Grimmauld (any/all) | what actually depends on that thing? Can we knownVulnerabilities and see who complains? | 13:23:01 |
K900 | Calamares lul | 13:23:09 |
Grimmauld (any/all) | oh. | 13:23:14 |
emily | I think we need to knownVulnerabilities as part of dropping Plasma 5 | 13:23:18 |
K900 | But yeah it should be very little things | 13:23:22 |
K900 | After we drop Plasma | 13:23:25 |
K900 | * After we drop Plasma 5 | 13:23:26 |
emily | it's sadly more than you'd expect | 13:23:31 |
emily | what concerns me more is that we should be marking it vulnerable on stable as well | 13:23:40 |
emily | that will probably require a Hydra exemption | 13:23:46 |
K900 | Most of the hits I'm seeing are Qt5 KDE Gear stuff | 13:23:54 |
K900 | Which is also getting yeeted | 13:23:58 |
emily | but it means all Plasma 5 users will get eval errors | 13:25:09 |
emily | that may be ok though considering they'd have to migrate in 25.11 | 13:25:15 |
emily | but we really ought to take this seriously | 13:25:20 |
K900 | It's not all | 13:25:33 |
emily | it may be worth doing as soon as we land Calamares | 13:25:31 |
emily | not even a default installation? | 13:25:50 |
K900 | It's mostly random leaf shit I think | 13:26:06 |
emily | ok | 13:26:16 |