#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 30th April 2008 ===

==== Local Packages ====

 * Updated `libpng10` to 1.0.33 and later, 1.0.34
 * New package `perl-Sendmail-PMilter`; this is a replacement for `perl-Sendmail-Milter`, which hasn't built successfully on 64-bit platforms for some time and won't build at all on Fedora 9. Since `perl-Sendmail-PMilter` builds cleanly on all of the platforms I build for, I can now include `sendmail-milter-spf` in the 64-bit repositories, since its `perl(Sendmail::Milter)` dependency can be satisfied by `perl-Sendmail-PMilter`.

==== Fedora Project ====

 * Updated `libpng10` to 1.0.33, which addresses [[CVE:2008-1382|CVE-2008-1382]] ([[RedHatBugzilla:441839|Bug #441839]]); it's not a big deal really since no Fedora applications are affected by this issue, but it's conceivable that some third-party applications might be. The 1.0.33 release is affected by the same [[http://sourceforge.net/mailarchive/forum.php?thread_name=CA58AB8F-6365-4F39-9E52-FA4135DFCC3E%40andrew.cmu.edu&forum_name=png-mng-misc|autotools issues]] as 1.2.27, and I had to include a substantial patch (generated by re-running the autotools) to get it to build at all on any system. There was today a release of 1.0.34 that is supposed to address the autotools issue but it hasn't actually made any difference. There's no point updating to this in Fedora because all it would involve is a new version of the patch - the underlying code is unchanged - and no doubt there will be another attempt to fix it soon, hopefully one that's tested on a Fedora-like distribution (not that there's anything unusual about Fedora).

----