Comment 14 for bug 1973033

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

As part of the wekkit2gtk security updates, the security team now has a hard requirement of backporting the versions of wpebackend-fdo and libwpe from lunar to kinetic and earlier releases. This also requires these dependencies to be promoted to main in focal and jammy.

While additional tests inside wpebackend-fdo and libwpe would be ideal, there aren't any available, and these dependencies are only used by the webkit2gtk package (and a couple of related now-unused packages like cog and wpewebkit).

The security team does perform our usual testing and QA on webkit2gtk updates, which includes the functionality provided by wpebackend-fdo and libwpe.

I have asked an archive admin, on behalf of the security team, to adjust the overrides on focal and jammy to promote those two packages to main so we can provide webkit2gtk security updates.