Activity log for bug #1973033

Date Who What changed Old value New value Message
2022-05-11 14:23:37 Sebastien Bacher bug added bug
2022-05-11 14:25:53 Sebastien Bacher wpebackend-fdo (Ubuntu): importance Undecided High
2022-05-11 14:27:12 Sebastien Bacher bug added subscriber MIR approval team
2022-05-11 20:37:56 Sebastien Bacher description [Availability] The package wpebackend-fdo is already in Ubuntu universe. The package wpebackend-fdo build for the architectures it is designed to work on. It currently builds and works for architectures: amd64 arm64 armhf i386 ppc64el riscv64 s390x Link to package https://launchpad.net/ubuntu/+source/wpebackend-fdo [Rationale] - The package wpebackend-fdo is required in Ubuntu main as a dependency of webkit2gtk. The dependency is optional but the default upstream and in other distributions and the only one upstream is really testing (turned out some of the issues we had previous cycle are because we aren't using the default backend, which also made a lower priority for upstream to work on fixes). Upstream is also planning to deprecate the nonwpe codepath. We might also need to build with that backend on older series at some point due to the previous statement. - The package wpebackend-fdo is required in Ubuntu main no later than aug 25 due to feature freeze [Security] - No CVEs/security issues in this software in the past - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Ubuntu and Debian and has currently no reports - Ubuntu https://bugs.launchpad.net/ubuntu/+source/wpebackend-fdo/+bug - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=wpebackend-fdo - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run a test at build time because upstream doesn't have one. That's something we need to work on. BLOCKER ^ - The package does not run an autopkgtest because upstream has no test and Debian didn't have some either. That's something we need to work on. BLOCKER ^ We need to work on the testing story, backup plan is to write some manual test plans. [Quality assurance - packaging] - debian/watch is present and works -- There is only one lintian warning # lintian --pedantic P: wpebackend-fdo source: package-uses-old-debhelper-compat-version 12 12 isn't that old but we will work on updating to 13 - There is one lintian overrides for having the .so distributed in the library rather than the dev because browsers try to load the .so and it should be available. The change was added in Debian to https://salsa.debian.org/webkit-team/wpebackend-fdo/-/commit/07a67e57 - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/webkit-team/wpebackend-fdo/-/blob/master/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - There are further dependencies that are not yet in main, MIR for them is at https://bugs.launchpad.net/ubuntu/+source/libwpe/+bug/1973031 [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is wpebackend-fdo Link to upstream project https://github.com/Igalia/WPEBackend-fdo [Availability] The package wpebackend-fdo is already in Ubuntu universe. The package wpebackend-fdo build for the architectures it is designed to work on. It currently builds and works for architectures: amd64 arm64 armhf i386 ppc64el riscv64 s390x Link to package https://launchpad.net/ubuntu/+source/wpebackend-fdo [Rationale] - The package wpebackend-fdo is required in Ubuntu main as a dependency of webkit2gtk. The dependency is optional but the default upstream and in other distributions and the only one upstream is really testing (turned out some of the issues we had previous cycle are because we aren't using the default backend, which also made a lower priority for upstream to work on fixes). Upstream is also planning to deprecate the nonwpe codepath. We might also need to build with that backend on older series at some point due to the previous statement. - The package wpebackend-fdo is required in Ubuntu main no later than aug 25 due to feature freeze [Security] - No CVEs/security issues in this software in the past - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Ubuntu and Debian and has currently no reports   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/wpebackend-fdo/+bug   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=wpebackend-fdo - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run a test at build time because upstream doesn't have one. That's something we need to work on. BLOCKER ^ - The package does not run an autopkgtest because upstream has no test and Debian didn't have some either. If webkit2gtk is built with it as it default backend then the webkitgtk autopkgtests are going to exercise wpe, is that enough? BLOCKER? ^ We need to work on the testing story, backup plan is to write some manual test plans. [Quality assurance - packaging] - debian/watch is present and works -- There is only one lintian warning # lintian --pedantic P: wpebackend-fdo source: package-uses-old-debhelper-compat-version 12 12 isn't that old but we will work on updating to 13 - There is one lintian overrides for having the .so distributed in the library rather than the dev because browsers try to load the .so and it should be available. The change was added in Debian to https://salsa.debian.org/webkit-team/wpebackend-fdo/-/commit/07a67e57 - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/webkit-team/wpebackend-fdo/-/blob/master/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - There are further dependencies that are not yet in main, MIR for them   is at https://bugs.launchpad.net/ubuntu/+source/libwpe/+bug/1973031 [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is wpebackend-fdo Link to upstream project https://github.com/Igalia/WPEBackend-fdo
2022-05-17 14:46:17 Didier Roche-Tolomelli wpebackend-fdo (Ubuntu): assignee Didier Roche (didrocks)
2022-05-24 09:37:26 Didier Roche-Tolomelli wpebackend-fdo (Ubuntu): assignee Didier Roche (didrocks) Ubuntu Security Team (ubuntu-security)
2022-05-24 23:37:24 Seth Arnold tags sec-1034
2022-06-07 14:27:41 Sebastien Bacher bug watch added https://github.com/Igalia/WPEBackend-fdo/issues/174
2022-07-27 08:54:11 Spyros Seimenis bug watch added https://github.com/mesonbuild/meson/issues/9300
2022-07-27 08:54:24 Spyros Seimenis bug added subscriber Spyros Seimenis
2022-07-27 08:54:31 Spyros Seimenis wpebackend-fdo (Ubuntu): assignee Ubuntu Security Team (ubuntu-security)
2022-08-02 14:40:39 Seth Arnold wpebackend-fdo (Ubuntu): status New In Progress
2022-08-02 14:43:50 Lukas Märdian wpebackend-fdo (Ubuntu): assignee Sebastien Bacher (seb128)
2022-08-04 09:22:02 Sebastien Bacher wpebackend-fdo (Ubuntu): status In Progress Fix Committed
2022-08-09 07:41:03 Didier Roche-Tolomelli wpebackend-fdo (Ubuntu): status Fix Committed Fix Released
2022-12-01 14:31:50 Sebastien Bacher nominated for series Ubuntu Jammy
2022-12-01 14:31:50 Sebastien Bacher bug task added wpebackend-fdo (Ubuntu Jammy)
2022-12-05 09:36:04 Sebastien Bacher wpebackend-fdo (Ubuntu Jammy): importance Undecided High
2022-12-06 15:54:04 Lukas Märdian wpebackend-fdo (Ubuntu Jammy): assignee Lukas Märdian (slyon)
2023-01-10 10:55:05 Lukas Märdian wpebackend-fdo (Ubuntu Jammy): status New Incomplete
2023-01-10 10:55:13 Lukas Märdian wpebackend-fdo (Ubuntu Jammy): assignee Lukas Märdian (slyon)
2023-05-17 07:05:39 Sebastien Bacher wpebackend-fdo (Ubuntu Jammy): status Incomplete New
2023-06-16 14:14:43 Sebastien Bacher wpebackend-fdo (Ubuntu Jammy): status New Fix Released