obsolete

CImg-3.1.0-1.fc36 and gmic-3.1.0-1.fc36

FEDORA-2022-ec3ce5fb9a created by cheese a year ago for Fedora 36

bump version

This update has been submitted for testing by cheese.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago
User Icon tyrbiter commented & provided feedback a year ago
karma

Requires a rebuild of darktable-3.8.1-1

Problem: problem with installed package darktable-3.8.1-1.fc36.x86_64 - package darktable-3.8.1-1.fc36.x86_64 requires libgmic.so.2()(64bit), but none of the providers can be installed - cannot install both gmic-3.1.0-1.fc36.x86_64 and gmic-2.9.9-2.fc36.x86_64 - cannot install the best update candidate for package gmic-2.9.9-2.fc36.x86_64

This update has been pushed to testing.

a year ago

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

a year ago
User Icon tyrbiter commented & provided feedback a year ago
karma

The odd thing here is that darktable does not appear to link to libgmic.so so I don't know why gmic is unable to update because of a package that isn't using it as a link target.

User Icon jmbegley commented & provided feedback a year ago
karma

Searching the darktable build log (https://kojipkgs.fedoraproject.org//packages/darktable/3.8.1/1.fc36/data/logs/x86_64/build.log) returns a lot of hits for /usr/lib64/libgmic.so

User Icon tyrbiter commented & provided feedback a year ago
karma

Right, but then this is for the installed darktable package:

[ ]$ ldd /usr/bin/darktable | grep gmic [ ]$

which seems pretty odd.

Latest darktable.spec file contains BuildRequires: gmic-devel but I don't see any Requires: entries for gmic packages in there.

User Icon jmbegley commented & provided feedback a year ago

ldd /usr/lib64/darktable/plugins/liblut3d.so | grep gmic libgmic.so.2 => /lib64/libgmic.so.2 (0x00007f7706c8c000)

It looks as though the darktable.spec files should be updated

User Icon decathorpe commented & provided feedback a year ago
karma

This update contains an soname bump for gmic, which was neither announced, nor was it handled properly, as is obvious from the negative karma here. Soname bumps are, in general, not allowed in stable branches, but given that this update fixes security issues, FESCo might grant you an exception for it.

If that happens, then please announce the breaking gmic update and notify maintainers about the required rebuilds. You can then resubmit this update, probably by using an on-demand side-tag.

This update has been obsoleted.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
-3
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
a year ago
in testing
a year ago
BZ#2030629 gmic-3.1.0 is available
0
0
BZ#2045443 gmic: FTBFS in Fedora rawhide/f36
0
0
BZ#2074549 CVE-2022-1325 CImg: Denial of service via RAM exhaustion in _load_bmp
0
0
BZ#2074550 CVE-2022-1325 CImg: Denial of service via RAM exhaustion in _load_bmp [fedora-all]
0
0

Automated Test Results