group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1795077@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package brotli - 1.0.3-1ubuntu1~16.04.1

---------------
brotli (1.0.3-1ubuntu1~16.04.1) xenial; urgency=medium

  * Backport from Ubuntu 18.04 LTS. This updated version is required for
    woff2 support in webkit2gtk. (LP: #1795077)
  * Lower debhelper compat to 9

brotli (1.0.3-1ubuntu1) bionic; urgency=medium

  * Apply pull requests #651, #656 to fix alignment issues on armhf.

brotli (1.0.3-1) unstable; urgency=medium

  * New upstream version 1.0.3
  * Drop obsolete patches

brotli (1.0.2-3) unstable; urgency=medium

  [ Jeremy Bicha ]
  * Use dh_missing --fail-missing (Closes: #888950)

  [ Tomasz Buchert ]
  * d/copyright: remove appveyor path (Closes: #888947)
  * Bump debhelper compat to 11

brotli (1.0.2-2) unstable; urgency=medium

  * Upload to unstable

brotli (1.0.2-1~exp0) experimental; urgency=medium

  * New upstream version 1.0.2
  * Updated std-ver to 4.1.0 (no changes needed)

brotli (1.0.0-1~exp0) experimental; urgency=medium

  * New upstream version 1.0.0
  * d/*: migrate 0.6.0 to 1.0.0
  * d/symbols: fix symbols file (Closes: #870831)
  * d/patches: refresh
  * Upload to experimental

brotli (0.6.0-2~exp0) experimental; urgency=medium

  [Tomasz Buchert]
  * d/gbp.conf: remove obsolete gbp.conf
  * d/control: add Ondřej to Uploaders
  * debian: provide shared libs pkgs
  * d/control: bump Standards-Version to 4 (no changes needed)

  [Ondřej Surý]
  * Use SOVERSION in libbrotli package name and add symbols file
  * Rewrite smoke_test.sh as autopkgtests
  * Upload to experimental
  * Add missing cmake to Build-Depends
  * Fix libbrotli0.6.0.symbols to refer to correct package
  * Add lintian override for amalgated libbrotli0.6.0 package

brotli (0.6.0-1) unstable; urgency=medium

  * d/*: debhelper 10 and uscan 4
  * New upstream version 0.6.0

brotli (0.5.2+dfsg-2) unstable; urgency=medium

  * Make object list deterministic (Closes: #845780)

brotli (0.5.2+dfsg-1) unstable; urgency=medium

  * Imported Upstream version 0.5.2+dfsg (Closes: #842016)
  * Update debian/rules to use new build system

brotli (0.4.0+dfsg-1) unstable; urgency=medium

  * Imported Upstream version 0.4.0+dfsg
  * Bumped Standards-Version to 3.9.8 (no changes needed)

brotli (0.3.0+dfsg-3) unstable; urgency=medium

  [ Raúl Benencia ]
  * Fixes for CVE-2016-1968 and CVE-2016-1624 (Closes: #817233)

  [ Tomasz Buchert ]
  * Bump Standards-Version to 3.9.7 (no changes needed)

 -- Jeremy Bicha <jbicha@xxxxxxxxxx>  Fri, 28 Sep 2018 17:36:57 -0400

** Changed in: brotli (Ubuntu Xenial)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-1624

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-1968

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1795077

Title:
  Backport brotli 1.0.3 to Ubuntu 16.04 LTS

Status in brotli package in Ubuntu:
  Fix Released
Status in brotli source package in Xenial:
  Fix Released

Bug description:
  Note to SRU Team
  ================
  This update adds a new binary package: libbrotli1

  We need libbrotli1 and libbrotli-dev promoted to main. python-brotli
  and python3-brotli can remain in universe.

  The approved MIR which mentions this will be done is LP: #1737053

  Impact
  ======
  webkit2gtk 2.20 released in March 2018 dropped its embedded brotli and woff2 libraries to use the system libraries. Because that version is a security update, webkit2gtk has not had support for woff2 web fonts since then in Ubuntu 16.04 LTS.

  The version of brotli in Ubuntu 16.04 LTS is too old to support
  webkit2gtk so we are backporting the version from Ubuntu 18.04 LTS

  Test Case
  =========
  1. Verify that woff2 is able to build successfully against brotli.

  2. Build webkit2gtk against woff2 and verify that woff2 fonts appear
  to work on web sites.

  Regression Potential
  ====================
  brotli has no reverse dependencies in Ubuntu 16.04 LTS.

  The new version is substantially more usable since it now offers a C
  library instead of just the Python bindings.

  This version also introduces a basic autopkgtest to ensure basic use
  of the Python bindings work. There are also build tests.

  Other Info
  ==========
  brotli is also used by apache2 in Ubuntu 18.10.

  The woff2 SRU for Ubuntu 16.04 LTS is LP: #1795094

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/brotli/+bug/1795077/+subscriptions