squeeze webkit security update

[Michael Gilbert]

On Mon, 21 Feb 2011 19:36:48 +0100, Moritz Mühlenhoff wrote:
> On Mon, Feb 21, 2011 at 01:20:40PM -0500, Michael Gilbert wrote:
> > On Mon, 21 Feb 2011 18:42:31 +0100, Thijs Kinkhorst wrote:
> > > Hi Mike,
> > > 
> > > On Monday 21 February 2011 18:23:52 Michael Gilbert wrote:
> > > > I've prepared a package for the new stable upstream webkit 1.2 branch
> > > >  [0]. That branch now only contains security fixes.  Would it be OK to
> > > > push this new upstream version as a DSA for squeeze?
> > > 
> > > Thanks. I think conceptually this is a good idea, I do have some practical 
> > > issues with the current package:
> > > 
> > > - The version number 1.2.7-1 won't work for stable since this is higher than 
> > > testing/unstable. In the past this would be propagated automatically to the 
> > > latter ones but I think that hasn't worked for many years now. 
> > 
> > Is there any way to restore this functionality?  This would be the
> > ideal solution.
> 
> Realistically, no.

What are the problems?  Are there some past threads that I could review
to better understand the issues at hand, and possibly postulate some
potential solutions?

It makes life so much simpler if we can prepare one package for all
releases.  I'd rather spend a lot of time upfront to solve the hard
infrastructure problem rather than have to deal with a bunch of
redundant work for every update.

Best wishes,
Mike