Wednesday 30th April 2008
Local Packages
Updated libpng10 to 1.0.33 and later, 1.0.34
New package perl-Sendmail-PMilter; this is a replacement for perl-Sendmail-Milter, which hasn't built successfully on 64-bit platforms for some time and won't build at all on Fedora 9. Since perl-Sendmail-PMilter builds cleanly on all of the platforms I build for, I can now include sendmail-milter-spf in the 64-bit repositories, since its perl(Sendmail::Milter) dependency can be satisfied by perl-Sendmail-PMilter.
Fedora Project
Updated libpng10 to 1.0.33, which addresses CVE-2008-1382 (Bug #441839); it's not a big deal really since no Fedora applications are affected by this issue, but it's conceivable that some third-party applications might be. The 1.0.33 release is affected by the same autotools issues as 1.2.27, and I had to include a substantial patch (generated by re-running the autotools) to get it to build at all on any system. There was today a release of 1.0.34 that is supposed to address the autotools issue but it hasn't actually made any difference. There's no point updating to this in Fedora because all it would involve is a new version of the patch - the underlying code is unchanged - and no doubt there will be another attempt to fix it soon, hopefully one that's tested on a Fedora-like distribution (not that there's anything unusual about Fedora).