On Wed, Dec 24, 2025 at 5:03 AM Rob B via epel-devel
<[email protected]> wrote:
>
> Where would I submit bug reports for a EPEL 9 package and is it worthwhile 
> since it will only get security updates following 9.7?

It's definitely worthwhile to submit bugs.  Fedora has a guide that
mostly works for this, but you'll need to change the product field
from "Fedora" to "Fedora EPEL" and select the appropriate version.

https://docs.fedoraproject.org/en-US/quick-docs/bugzilla-file-a-bug/

Nothing special happened to EPEL 9 packages with the release of RHEL
9.7.  EPEL generally has a focus on stable packages with minimal
changes (i.e. security and bug fixes), but larger changes can be
appropriate if they're backwards compatible.

https://docs.fedoraproject.org/en-US/epel/epel-policy/#_digest
https://docs.fedoraproject.org/en-US/epel/epel-policy-updates/

>
> I get the following error:
>
> Program received signal SIGSEGV, Segmentation fault.
> 0x00007ffff7f05d79 in LST_HEAD::dequeue (this=0x312e32)
>     at /usr/src/debug/dcmtk-3.6.6-12.el9.x86_64/dcmnet/libsrc/lst.cc:43
> 43        if (theList.size() == 0) return NULL;
>
> My current workaround is to simply build the EPEL10 version from source and 
> compile it for EPEL9:

Based on that it sounds like 3.6.7 included the fix for this.  Using
that info and searching a bit, I tracked down an Ubuntu bug that
indicates the initial fix for CVE-2021-41687 introduced a regression.
This was fixed in 3.6.7, and can be backported as a patch to the EPEL
9 package.  It will probably need to be backported to EPEL 8 as well.

https://github.com/DCMTK/dcmtk/commit/32ae3e5137e5a52f61a8dc9186f2539226794217

I've submitted this as a pull request to the EPEL 9 package.

https://src.fedoraproject.org/rpms/dcmtk/pull-request/11

Can you download the RPM from the scratch build and verify it fixes
the issue for you?

https://kojipkgs.fedoraproject.org/work/tasks/4326/140784326/dcmtk-3.6.6-13.el9.x86_64.rpm

>
> wget 
> https://kojipkgs.fedoraproject.org//packages/dcmtk/3.6.7/8.el10_0/src/dcmtk-3.6.7-8.el10_0.src.rpm
> rpm -ivh dcmtk-3.6.7-8.el10_0.src.rpm
> rpmbuild -ba SPECS/dcmtk.spec
>
> Also, is there a way to participate in testing backports before they get into 
> EPEL?
>
> Many thanks,
> and merry christmas
> --
> _______________________________________________
> epel-devel mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/[email protected]
> Do not reply to spam, report it: 
> https://pagure.io/fedora-infrastructure/new_issue



-- 
Carl George

-- 
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to