Bug#989307: DSA-4923-1: upgrading libwebkit2gtk-4.0-37 on buster pulls in xdg-desktop-portal

Alberto Garcia berto at igalia.com
Wed Jun 2 00:29:31 BST 2021


On Mon, May 31, 2021 at 08:32:53PM +0200, Holger Levsen wrote:

> < h01ger> DSA 4923 causes xdg-desktop-portal(-gtk) to be installed
> here, much to my surprise and unhappyness

I think we can spare the discussion about whether this is a problem
and how much of a problem it actually is, because I just realized that
the WebKit sandbox (which is the reason for that dependency) is not
used by Evolution or Epiphany in buster, so the user would need to
enable it manually.

So I can lower it to a 'Suggests'. I'm not sure if that is strong
enough to justify another security upload, but we also have a
potential regression in #989332 so I may need to prepare a new one
soon anyway.

Berto



More information about the Pkg-webkit-maintainers mailing list