Public bug reported:

Availability
============
Built for all supported architectures (presumably). In sync with Debian.

Rationale
=========
woff2 is a library maintained by Google to convert fonts from TTF to the woff2 
format and decompress from woff2 to TTF. The WOFF 2.0 format uses the Brotli 
compression algorithm to compress fonts suitable for use in CSS @font-face 
rules. WOFF 2.0 is a W3C Candidate  Recommendation. See the brotli MIR at LP: 
#1737053.

brotli and woff2 are libraries that are technically already in main
because they are bundled in Firefox and webkit2gtk.

The next major stable release of webkit2gtk, 2.20, will be released in March. 
It drops those 2 bundled libraries. I think our options are basically
1) Bundle those libraries anyway, or
2) Approve this MIR, or
3) Drop support for the WOFF2 format in webkit2gtk

Security
========
I assume we want a security review here.

https://security-tracker.debian.org/tracker/source-package/woff2
https://launchpad.net/ubuntu/+source/woff2/+cve

Quality assurance
=================
- Please subscribe Ubuntu Desktop Bugs.
- No test suite
- No autopkgtests

https://bugs.launchpad.net/ubuntu/+source/woff2
https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=woff2
https://github.com/google/woff2/issues

Dependencies
============
No universe binary dependencies

Standards compliance
====================
4.1.2, debhelper compat 10, dh7 simple rules

Maintenance
===========
Actively maintained:
https://github.com/google/woff2

Maintained by the Debian Fonts Team in Debian. It's a small team so it
may need co-maintenance help from the Ubuntu Desktop team.

Other Info
==========
woff2 was only packaged in Debian and Ubuntu very recently.

webkit2gtk is managed similar to Firefox and Chromium. So far, new
releases are pushed to Ubuntu 16.04 LTS and newer as security updates,
but the Ubuntu Security Team does not guarantee security support for
webkit2gtk.

We are going to need to backport brotli and woff2 into main as security
updates for 16.04 LTS and 17.10.

** Affects: woff2 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: bionic

** Tags added: bionic

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1742743

Title:
  [MIR] woff2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/woff2/+bug/1742743/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to