On my FP6, e/OS v4.2 shows that Android webview is version 148.0.7778.178, which dates back in May 2026…. As a comparison, CalyxOS v.7.2.4.20 (e.g. for FP5), which was released 2.5 weeks ago with the August security patch, includes Android webview 151.0.7922.71, while IodéOS v7.7 also seems to run on Android webview 151.x. It seems that over 1400 security flaws were fixed between v149, v150 and v151. So e/OS v4.2. apparently misses all those updates…
I’ve never been that much worried with the small lag in security updates for the monthly Android SPL in e/OS. However lags in Android webview seem much more critical. I’d be glad if the team could finally issue the promised statement on e/OS security policy that has been announced since several months in the weekly dev and testing update threads, with a specific emphasis on why android webview could not be updated separately from the rest of the OS (as in e.g. AXP.OS), or include a more recent iteration.