Re: Mitigating the problem of limited security support

[Jeremy Bicha <jbicha@ubuntu.com>]

On Sun, May 28, 2017 at 7:19 PM, Alberto Garcia <berto@igalia.com> wrote:
> The good news is that the first kind of problems are detected and
> fixed immediately, so waiting a couple of weeks before uploading
> the releases to debian-security could be an option (is that what
> Ubuntu does?).

For the past 9 months, the development version of Ubuntu tests the
beta versions of the new major webkit2gtk release (for instance Zesty
tested the 2.15.90 releases). This has been useful in catching
regressions before they ever hit a stable webkit2gtk release.

If a webkit2gtk release fixes publicized CVEs, the release is now
pushed as a security update into Ubuntu Stable Releases fairly
quickly.

Thanks,
Jeremy Bicha