Update to the upstream 1.12.1 bugfix version

Bug #2015543 reported by Sebastien Bacher
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
wpebackend-fdo (Ubuntu)
Fix Released
High
Unassigned
Jammy
Fix Released
Undecided
Unassigned

Bug Description

* Impact

The update fixes memory handling issues which could potential have security implication. It was requested by the MIR team on https://bugs.launchpad.net/ubuntu/+source/wpebackend-fdo/+bug/1973033/comments/11 as we need to promote the package for incoming webkitgtk security updates

Fedora issues an update on similar concern https://bodhi.fedoraproject.org/updates/FEDORA-2022-f98ab9f311

* Testcase

Unfortunately it's not easy to test wpebackend-fdo since the project has no tests nor demo utility. The backend is used mostly by webkitgtk but the current archive version is built without that option. It is a requirement for newer webkitgtk series though and such for incoming security update (since newer webkitgtk series are rolled out as security updates)

* Regression potential

The changes are small fixes for memory management issues but if those were wrong then it could lead to rendering issues or crashes in webkitgtk clients once webkitgtk is build with libwpe.

Revision history for this message
Sebastien Bacher (seb128) wrote :

The current version in Kinetic and Lunar are newer

summary: - Cherry pick some upstream fixes
+ Update to the upstream 1.12.1 bugfix version
Changed in wpebackend-fdo (Ubuntu):
importance: Undecided → High
status: New → Fix Released
Revision history for this message
Chris Halse Rogers (raof) wrote :

It looks like (for Jammy, at least) there is an in-archive consumer of libwpebackend-fdo-1.0-1 - cog. We need at least a minimal smoke test for SRU verification, and that should suffice. I don't have a Jammy system handy, and cog isn't in the archives post-Jammy - could someone please cook up a minimal test case using cog?

Changed in wpebackend-fdo (Ubuntu Jammy):
status: New → Incomplete
Revision history for this message
Sebastien Bacher (seb128) wrote :

@Chris, I've tried that bug 'cog' seems to just not be working, bug #1970779 has some details

$ cog http://www.ubuntu.com

(cog:8292): Cog-WARNING **: 09:19:22.193: Cannot create platform: Could not find an usable platform module
wpe: could not load the impl library. Is there any backend installed?: libWPEBackend-default.so: cannot open shared object file: No such file or directory
Abandon (core dumped)

Trying to force the platform or under X or Weston doesn't change the behavour

Changed in wpebackend-fdo (Ubuntu Jammy):
status: Incomplete → New
Revision history for this message
Steve Langasek (vorlon) wrote : Please test proposed package

Hello Sebastien, or anyone else affected,

Accepted wpebackend-fdo into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/wpebackend-fdo/1.12.1-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-jammy to verification-done-jammy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-jammy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in wpebackend-fdo (Ubuntu Jammy):
status: New → Fix Committed
tags: added: verification-needed verification-needed-jammy
Revision history for this message
Sebastien Bacher (seb128) wrote :

I've rebuilt webkitgtk the wpe support enabled in a ppa, built using proposed and the package from this SRU

https://launchpad.net/~ubuntu-desktop/+archive/ubuntu/ppa/+sourcepub/14746595/+listing-archive-extra

testing epiphany-browser with wpebackend-fdo 1.12.1-0ubuntu1 browsing some websites works as expected, including playing videos on youtube. I'm marking it as verified

tags: added: verification-done verification-done-jammy
removed: verification-needed verification-needed-jammy
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package wpebackend-fdo - 1.12.1-0ubuntu1

---------------
wpebackend-fdo (1.12.1-0ubuntu1) jammy; urgency=medium

  * New bugfix version (lp: #2015543)

 -- Sebastien Bacher <email address hidden> Fri, 07 Apr 2023 11:50:27 +0200

Changed in wpebackend-fdo (Ubuntu Jammy):
status: Fix Committed → Fix Released
Revision history for this message
Chris Halse Rogers (raof) wrote : Update Released

The verification of the Stable Release Update for wpebackend-fdo has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.