Morph (QtWebEngine) outdated

c4pp4

Release: OTA-22
User-agent: Mozilla/5.0 (Linux; Ubuntu 16.04) AppleWebKit/537.36 Chrome/77.0.3865.129 Safari/537.36
Internet banking site: https://ib.airbank.cz

My internet banking is disabled due to outdated Morph web browser. According to this: https://github.com/ubports/morph-browser/issues/223#issuecomment-529066969, user-agent is using version taken from QtWebEngine. The installed one is 5.14.2 which is quite old I think.

Is it safe to use the browser?
What are my options now?

domubpkm

Look at this : https://gitlab.com/ubports/core/packaging/qtwebengine/-/merge_requests/5
I don't know if it stable enough : you can test but maybe asking to Balcy before.

c4pp4

@domubpkm Testing MR is not an option for me. I'm able to test QA only. And I think more important is the answer to question 1. about security.

kugiigi

The good thing is that there are recent progress in this PR

c4pp4

https://security.gentoo.org/glsa/202101-30

domubpkm

good news : in OTA-23 project : upgrade QtWebengine to 5.15.9 https://gitlab.com/ubports/core/packaging/qtwebengine/-/merge_requests/8

uwahl

@domubpkm
Using Nexus5 dev-->stable, the qt-engine update doesn't match with it... after installing the update, some apps like morph and seabass crashed after the opening screen...
so I reinstalled stable version.