What happens when a security hole is fixed in WebKit's source but not released as a patch by Apple? Let's find out

Three weeks and counting for Cupertino to update Safari's engine

A vulnerability in the open-source WebKit rendering engine used by Apple's Safari browser remains unfixed three weeks after a patch repaired the flaw in the WebKit source code....