Skip to content

Add new PDF dependencies for epiphany

Michael Catanzaro requested to merge mcatanzaro/epiphany-pdfs into master

Epiphany will depend on libevince for displaying PDFs.

libevince depends on poppler and openjpeg, which are security-critical and have a problematic CVE history. As such, we don't want to bundle them in the Epiphany flatpak-builder manifest, where they'll not be updated properly. We want to inherit them from the runtime. So move them to SDK. We would not need to do this once we switch to building our core app flatpaks from gnome-build-meta, but we're not there yet, so got to make do in the meantime.

While we're at it, add these dependencies to our epiphany.bst as well.

Merge request reports