(Slightly) Incompatible update request for rust-routinator #369

Closed
opened 2026-07-03 12:52:02 +00:00 by salimma · 6 comments
Contributor

Hello again!

Yet another slightly incompatible update request - the breaking change in 0.15.0 drops an off-by-default option that kept introducing CVEs over a few releases, but the update we really are concerned is 0.15.2 which patches 4 CVEs that upstream considers high-severity (CVSS-B between 8.2 and 8.7)

https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org/thread/IRWQV62AYDIX2JUWO4HQMC4V6POP5UJK/

Hello again! Yet another slightly incompatible update request - the breaking change in 0.15.0 drops an off-by-default option that kept introducing CVEs over a few releases, but the update we really are concerned is 0.15.2 which patches *4* CVEs that upstream considers high-severity (CVSS-B between 8.2 and 8.7) https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org/thread/IRWQV62AYDIX2JUWO4HQMC4V6POP5UJK/
Member

Seems good to me. +1

Seems good to me. +1
Member

+1

+1
Owner

+1

+1
Owner

+1

+1
Owner

+1

+1
Owner

This has gotten enough votes to pass. It is approved.
Please continue to follow the uncompatible upgrade process as you upgrade the package(s).

This has gotten enough votes to pass. It is approved. Please continue to follow the uncompatible upgrade process as you upgrade the package(s).
tdawson 2026-07-15 18:11:44 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
6 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
epel/steering#369
No description provided.