Re: Proven packager help request: DCMTK (and dependent packages) require update in F29/F30

2019-09-17 Thread Ankur Sinha
On Sat, Sep 14, 2019 07:28:37 -0500, Richard Shaw wrote: > On Sat, Sep 14, 2019 at 4:50 AM Kevin Kofler wrote: > > > I do not know the details well enough to be able to decide which is the > better way here. Both should be doable in principle. > > > As the maintainer of OpenImageIO I

Re: Proven packager help request: DCMTK (and dependent packages) require update in F29/F30

2019-09-14 Thread Richard Shaw
On Sat, Sep 14, 2019 at 4:50 AM Kevin Kofler wrote: > > I do not know the details well enough to be able to decide which is the > better way here. Both should be doable in principle. > As the maintainer of OpenImageIO I agree with Kevin, I'm OK with either, but one thing I would ask upstream is

Re: Proven packager help request: DCMTK (and dependent packages) require update in F29/F30

2019-09-14 Thread Kevin Kofler
Mamoru TASAKA wrote: > As written on https://fedoraproject.org/wiki/Updates_Policy#Philosophy > updates should aim to fix bugs and not to introduce features. And changing > ABI is discouraged unless avoided. Here, we have a library with only 6 packages using it, and the source-level API appears

Re: Proven packager help request: DCMTK (and dependent packages) require update in F29/F30

2019-09-13 Thread Mamoru TASAKA
Ankur Sinha wrote on 2019/09/14 2:58: On Fri, Sep 13, 2019 23:20:50 +0900, Mamoru TASAKA wrote: Ankur Sinha wrote on 2019/09/13 23:07: Well, actually some google search result is that the actual fix seems https://github.com/commontk/DCMTK/commit/40917614e and the tracker is

Re: Proven packager help request: DCMTK (and dependent packages) require update in F29/F30

2019-09-13 Thread Ankur Sinha
On Fri, Sep 13, 2019 23:20:50 +0900, Mamoru TASAKA wrote: > Ankur Sinha wrote on 2019/09/13 23:07: > Well, actually some google search result is that the actual fix seems > https://github.com/commontk/DCMTK/commit/40917614e > and the tracker is > https://support.dcmtk.org/redmine/issues/858 > >

Re: Proven packager help request: DCMTK (and dependent packages) require update in F29/F30

2019-09-13 Thread Mamoru TASAKA
Ankur Sinha wrote on 2019/09/13 23:07: Hello, A CVE[1] in dcmtk was fixed in 3.6.4 which is in F31+. F29 and F30 are still at 3.6.2 however, and need updating. This includes a soname bump ([2] vs [3]), though, so dependent packages will also need to be rebuilt and pushed as updates all at once.

Proven packager help request: DCMTK (and dependent packages) require update in F29/F30

2019-09-13 Thread Ankur Sinha
Hello, A CVE[1] in dcmtk was fixed in 3.6.4 which is in F31+. F29 and F30 are still at 3.6.2 however, and need updating. This includes a soname bump ([2] vs [3]), though, so dependent packages will also need to be rebuilt and pushed as updates all at once. sudo dnf repoquery --source