Bundled Provides Libraries and Versioning
by Adam Miller
Hello all,
In today's FESCo meeting we discussed the fact that there are many
RPMs currently in Fedora (a reported 244 in Rawhide currently) that
are defining a `Provides: bundled(<lib>) = <version>` but excluding
the version completely[0][1]. This removes that ability to properly
perform source code auditing and security vulnerability tracking.
My question to the Fedora Contributor Community is, how should we
handle this? Is this something that should just simply be fixed by the
packages currently violating the Guidelines, should the Guidelines be
altered in a way that makes this easier to deal with for Packagers but
also provides what is needed for auditing and vulnerability tracking,
or is there simply clarification needed by what is required in the
<version> field?
I look forward to the discussion.
Thank you,
-AdamM
[0] - https://pagure.io/fesco/issue/1734
[1] - https://pagure.io/packaging-committee/issue/696
6 years, 9 months
How to take over old review request?
by Zamir SUN
Hi all,
I see a review request by Christopher Meng (cicku) for cvechecker[1].
While it's been quiet for a long time, and I want to push this request
forward with mine. So I did commented in comment 7 this March. However,
there is no updates till now. So I want to know if I should file a new
package request instead, or if someone can point me out the right
process for this.
Copy the assignee of the request Pavel.
Thanks.
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1062808
--
Ziqian SUN (Zamir)
zsun(a)fedoraproject.org
GPG : 1D86 6D4A 49CE 4BBD 72CF FCF5 D856 6E11 F2A0 525E
Want to know more about Fedora?
Visit https://fedoraproject.org/wiki/
6 years, 9 months
Changing default build flags
by Mattia Verga
Since Rawtherapee developers are suggesting to use -O3 build flag instead of Fedora default -O2, is it possible to override that or it's forbidden by any packaging rule?
And how can I change only that flag without touching all the others? Can I simply append -O3 to the default build flags?
Thanks
6 years, 9 months
