Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 23 Jan 2022 14:15:30 -0500
From: Leo Famulari <>
To: John Helmert III <>
Subject: Re: WebKitGTK and WPE WebKit Security Advisory

On Sat, Jan 22, 2022 at 10:02:46PM -0600, John Helmert III wrote:
> With this big of a gap between releases and security advisories, it
> seems that users and distributors will be unaware of the necessity of
> updating due to security fixes, sometimes for weeks after the
> release. Why not always publish advisories close to new releases?

Since (almost?) every WebKitGTK update includes fixes for bugs that
allow remote execution of arbitrary code, I'd expect that distributors
are well aware that every update is critical.

And given the complexity of a fully-featured browser engine, it probably
cannot be any other way: it's the same story for Firefox and Chrome.

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.