Mamoru TASAKA wrote:
As written on
https://fedoraproject.org/wiki/Updates_Policy#Philosophy
updates should aim to fix bugs and not to introduce features. And changing
ABI is discouraged unless avoided.
Here, we have a library with only 6 packages using it, and the source-level
API appears to be compatible, so I think a grouped update of all 7 packages
(the library + the 6 dependent packages) may well make sense, depending on
what the other changes are.
But yes, backporting security fixes should always be considered, it would
also get the fix out sooner than coordinating a grouped update.
I do not know the details well enough to be able to decide which is the
better way here. Both should be doable in principle.
Kevin Kofler