Re: bug#26109: [PATCH 3/7] gnu: Add dcmtk.

2017-03-20 Thread Leo Famulari
On Sat, Mar 18, 2017 at 01:36:31PM -0400, John Darrington wrote: > [CC guix-devel@gnu.org] > > So we have to make a choice: > > 1. Package a released program with a known vulnerability; or Although all non-trivial software contains bugs, many of which can be exploited, we should not add new

Re: bug#26109: [PATCH 3/7] gnu: Add dcmtk.

2017-03-20 Thread Kei Kebreau
John Darrington writes: > [CC guix-devel@gnu.org] > > So we have to make a choice: > > 1. Package a released program with a known vulnerability; or > 2. Package an unreleased git snapshot. > > Which is the lesser evil? I choose option two. I'm quite uncomfortable with packaging

Re: bug#26109: [PATCH 3/7] gnu: Add dcmtk.

2017-03-18 Thread John Darrington
[CC guix-devel@gnu.org] So we have to make a choice: 1. Package a released program with a known vulnerability; or 2. Package an unreleased git snapshot. Which is the lesser evil? J' On Sat, Mar 18, 2017 at 12:21:40PM -0400, Kei Kebreau wrote: > John Darrington