| 19 May 2025 |
K900 (Old) | In reply to @emilazy:matrix.org by who? Qt | 15:46:45 |
emily | https://www.qt.io/blog/extended-security-maintenance-for-qt-5.15-begins-may-2025 ok cool | 15:47:10 |
emily | wait no | 15:47:19 |
emily | that's commercial-only? | 15:47:21 |
emily | it looks to me like we have 7 days. | 15:47:32 |
emily | (and that's not an old post, it's from a couple months ago) | 15:47:57 |
K900 (Old) | It seems they will keep publishing patches for qtwebengine at least | 15:48:09 |
emily | do you have a source for that? 😅 | 15:48:23 |
K900 (Old) | Somewhere on the mailing lists | 15:49:04 |
Grimmauld (any/all) | we should still drop it as soon as we can tbh | 15:50:18 |
Grimmauld (any/all) | or at least slap it with known vulns | 15:50:27 |
emily | why? | 15:52:08 |
emily | if Qt is patching it then it's as good as it is now | 15:52:13 |
emily | the question is just whether they are | 15:52:16 |
K900 (Old) | Well it's still a really old chromium version | 15:52:58 |
K900 (Old) | Which is not great | 15:53:03 |
emily | sure. it's not great now either | 15:55:29 |
emily | Qt 6 WebEngine isn't that great either IIRC | 15:55:37 |
emily | but not knownVulnerabilities territory imo. if there are no known vulnerabilities and ones that become known are addressed. | 15:56:03 |
emily | I mean I'd like to see all of Qt 5 gone but last time I looked at qtwebengine users there was still a lot of stuff. | 15:56:27 |
K900 (Old) | Honestly | 15:56:31 |
emily | for instance, uh, our installer? | 15:56:36 |
K900 (Old) | I'm just looking at the users of qtwebengine5 | 15:56:37 |
emily | though someone should finish moving that to Qt 6 | 15:56:45 |
K900 (Old) | And I think we might be in actually droppable territory | 15:56:49 |
emily | I never finished my WIP patch | 15:56:50 |
K900 (Old) | If we get rid of all the KDE stuff | 15:57:01 |
emily | last time we discussed this, Calamares, RStudio (there's an Electron version?), Plex Media Player (deprecated I guess?), Jellyfin, SuperCollider/CSound came up | 15:57:45 |
emily | losing the Jellyfin player seems painful | 15:58:34 |
emily | (the Plex one too maybe? AIUI the replacement is worse) | 15:58:53 |