On Wed, 16 Feb 2022 13:53:04 -0500 "Steven A. Falco" <stevenfalco@xxxxxxxxx> wrote: > There are some CVE's against KiCad that have been fixed in the latest version, namely KiCad 6.0.2. I've built that for F36 and Rawhide. > > I have not released KiCad 6.0.2 into Fedora 34 and 35, because my understanding is that by policy, we don't generally allow "major version" updates in stable Fedora releases. Thus F34 and F35 still ship KiCad 5.1.12, which is affected by the CVE's. > > I could easily build KiCad 6.0.2 for F34 / F35 - in fact, I have done so in the KiCad Copr repository. > > So, should this situation be an exception to the policy of "no major version changes in a stable release"? as often, it depends :-) - what's the severity level of the CVEs? - does KiCad 6 come with substantial changes like UI redesign, compatibility issues with previous release, etc? Dan _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
