Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-24 Thread Kalev Lember
On 08/24/2017 05:48 PM, Kevin Fenzi wrote: > I was going to look at f25/f26 for a 6.x update, but I haven't had any > time to get to it. ;( Would need a bunch of rebuilds and waiting in > testing a while so 3rd parties could see it and rebuild at the very least. I think we're going to need an ABI

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-24 Thread Kevin Fenzi
On 08/24/2017 08:19 AM, Adam Williamson wrote: > On Thu, 2017-08-24 at 09:12 +0200, Remi Collet wrote: >> Le 24/08/2017 à 08:58, Adam Williamson a écrit : >>> On Thu, 2017-08-24 at 06:44 +0200, Remi Collet wrote: Le 24/08/2017 à 02:32, Moez Roy a écrit : > The soname bump requires

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-24 Thread Adam Williamson
On Thu, 2017-08-24 at 09:12 +0200, Remi Collet wrote: > Le 24/08/2017 à 08:58, Adam Williamson a écrit : > > On Thu, 2017-08-24 at 06:44 +0200, Remi Collet wrote: > > > Le 24/08/2017 à 02:32, Moez Roy a écrit : > > > > > > > The soname bump requires packages that depend on it need to be rebuilt,

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-24 Thread Kamil Dudka
On Thursday, August 24, 2017 2:32:02 AM CEST Moez Roy wrote: > On Mon, Jul 31, 2017 at 12:13 PM, Kevin Fenzi wrote: > > ok, I rebuilt the following ones. The ones with F next to them failed to > > > > build: > > autotrace-0.31.1-44.fc26.src.rpm > >

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-24 Thread Remi Collet
Le 24/08/2017 à 08:58, Adam Williamson a écrit : > On Thu, 2017-08-24 at 06:44 +0200, Remi Collet wrote: >> Le 24/08/2017 à 02:32, Moez Roy a écrit : >> >>> The soname bump requires packages that depend on it need to be rebuilt, so >>> I updated ImageMagick to 7.0.6-9. >> >> >> Such a version bump

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-24 Thread Adam Williamson
On Thu, 2017-08-24 at 06:44 +0200, Remi Collet wrote: > Le 24/08/2017 à 02:32, Moez Roy a écrit : > > > The soname bump requires packages that depend on it need to be rebuilt, so > > I updated ImageMagick to 7.0.6-9. > > > Such a version bump in stable branch is not acceptable. > > ImageMagick

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-23 Thread Remi Collet
Le 24/08/2017 à 02:32, Moez Roy a écrit : > The soname bump requires packages that depend on it need to be rebuilt, so > I updated ImageMagick to 7.0.6-9. Such a version bump in stable branch is not acceptable. ImageMagick 7 removed lot of functions (deprecated in v6) Especially as

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-23 Thread Michael Cronenworth
On 08/23/2017 07:32 PM, Moez Roy wrote: The soname bump requires packages that depend on it need to be rebuilt, so I updated ImageMagick to 7.0.6-9. I tagged this update now for Updates Testing for f25 & f26 as it is an urgent fix. It is also in build root override so affected packages can

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-23 Thread Michael Cronenworth
On 08/23/2017 07:32 PM, Moez Roy wrote: The soname bump requires packages that depend on it need to be rebuilt, so I updated ImageMagick to 7.0.6-9. I tagged this update now for Updates Testing for f25 & f26 as it is an urgent fix. It is also in build root override so affected packages

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-23 Thread Moez Roy
On Mon, Jul 31, 2017 at 12:13 PM, Kevin Fenzi wrote: > ok, I rebuilt the following ones. The ones with F next to them failed to > build: > > autotrace-0.31.1-44.fc26.src.rpm > converseen-0.9.6.2-1.fc27.src.rpm > dmtx-utils-0.7.4-2.fc27.src.rpm >

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-03 Thread Remi Collet
Le 27/07/2017 à 11:18, Reindl Harald a écrit : > WTF - "Image Tragick" is still not fixed in Fedora? > can someone please port php-pecl-imagick to GraphicsMagick php-pecl-gmagick already exists ;) ___ devel mailing list -- devel@lists.fedoraproject.org

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-08-03 Thread Mamoru TASAKA
Kevin Fenzi wrote on 08/01/2017 04:13 AM: ok, I rebuilt the following ones. The ones with F next to them failed to build: F rubygem-rmagick-2.16.0-3.fc26.src.rpm Fixed on rawhide. Regards, Mamoru ___ devel mailing list --

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-31 Thread Kevin Fenzi
ok, I rebuilt the following ones. The ones with F next to them failed to build: autotrace-0.31.1-44.fc26.src.rpm converseen-0.9.6.2-1.fc27.src.rpm dmtx-utils-0.7.4-2.fc27.src.rpm drawtiming-0.7.1-20.fc26.src.rpm F gtatool-2.2.0-4.fc27.src.rpm imageinfo-0.05-25.fc26.src.rpm

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-30 Thread Kevin Fenzi
On 07/29/2017 12:07 AM, Ville Skyttä wrote: > On Sat, Jul 29, 2017 at 2:45 AM, Kevin Fenzi wrote: >> On 07/28/2017 04:43 PM, Kevin Fenzi wrote: >>> On 07/28/2017 07:20 AM, Michael Cronenworth wrote: On 07/27/2017 09:29 PM, Kevin Fenzi wrote: > ok. I have pushed 6.9.9-3

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-29 Thread Ville Skyttä
On Sat, Jul 29, 2017 at 2:45 AM, Kevin Fenzi wrote: > On 07/28/2017 04:43 PM, Kevin Fenzi wrote: >> On 07/28/2017 07:20 AM, Michael Cronenworth wrote: >>> On 07/27/2017 09:29 PM, Kevin Fenzi wrote: ok. I have pushed 6.9.9-3 to rawhide. Hopefully I got all the CVE's

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-28 Thread Kevin Fenzi
On 07/28/2017 04:43 PM, Kevin Fenzi wrote: > On 07/28/2017 07:20 AM, Michael Cronenworth wrote: >> On 07/27/2017 09:29 PM, Kevin Fenzi wrote: >>> ok. I have pushed 6.9.9-3 to rawhide. >>> >>> Hopefully I got all the CVE's right in the changelog. >>> If someone wants to check over and make sure I

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-28 Thread Kevin Fenzi
On 07/28/2017 07:20 AM, Michael Cronenworth wrote: > On 07/27/2017 09:29 PM, Kevin Fenzi wrote: >> ok. I have pushed 6.9.9-3 to rawhide. >> >> Hopefully I got all the CVE's right in the changelog. >> If someone wants to check over and make sure I didn't miss any that were >> fixed in the 6.x

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-28 Thread Björn 'besser82' Esser
Am 28.07.2017 um 16:20 schrieb Michael Cronenworth: On 07/27/2017 09:29 PM, Kevin Fenzi wrote: ok. I have pushed 6.9.9-3 to rawhide. Hopefully I got all the CVE's right in the changelog. If someone wants to check over and make sure I didn't miss any that were fixed in the 6.x branch that would

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-28 Thread Michael Cronenworth
On 07/27/2017 09:29 PM, Kevin Fenzi wrote: ok. I have pushed 6.9.9-3 to rawhide. Hopefully I got all the CVE's right in the changelog. If someone wants to check over and make sure I didn't miss any that were fixed in the 6.x branch that would be great. I'd like to let it run a few days in

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-27 Thread Kevin Fenzi
ok. I have pushed 6.9.9-3 to rawhide. Hopefully I got all the CVE's right in the changelog. If someone wants to check over and make sure I didn't miss any that were fixed in the 6.x branch that would be great. I'd like to let it run a few days in rawhide before updating stable branches, just in

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-27 Thread Kevin Fenzi
On 07/27/2017 10:11 AM, Michael Catanzaro wrote: > Ouch. > > Since the unresponsive maintainer process takes some time, could a > provenpackager please update ImageMagick while we wait for this to go > through? I can try and update to the latest 6.x version... but looks like 7.x changes api and

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-27 Thread Stephen John Smoogen
On 27 July 2017 at 13:37, Stephen John Smoogen wrote: > > > On 27 July 2017 at 13:11, Michael Catanzaro > wrote: > >> Ouch. >> >> Since the unresponsive maintainer process takes some time, could a >> provenpackager please update ImageMagick while we

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-27 Thread Stephen John Smoogen
On 27 July 2017 at 13:11, Michael Catanzaro wrote: > Ouch. > > Since the unresponsive maintainer process takes some time, could a > provenpackager please update ImageMagick while we wait for this to go > through? > > It is a serious oversight that our security process

Re: ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-27 Thread Michael Catanzaro
Ouch. Since the unresponsive maintainer process takes some time, could a provenpackager please update ImageMagick while we wait for this to go through? It is a serious oversight that our security process can fail like this for such a major package when the maintainer is not watching

ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev)

2017-07-26 Thread Moez Roy
ImageMagick Unresponsive Maintainer process - hubbitus (Pavel Alexeev) Sources were last updated 2016-01-06 13:43:26 - https://koji.fedoraproject.org/koji/packageinfo?packageID=425 Since then there have been numerous security vulnerabilities including ImageTragick. I commented here: https