I have a new deltarpm package built for the rel-eng repo:
http://koji.fedoraproject.org/koji/taskinfo?taskID=1721745
I can put it into the rel-eng repository to update the servers but who do I talk to about testing it? We'll also need approval to brakinfra change freeze to deploy it once it's tested.
Risk:
This update affects creation of deltas between zlib compressed rpms. That should not affect F-12 except for packages which failed the mass rebuild and have not been updated since. It will affect the updates repository in previous releases where we are generating deltarpms.
Reason:
This update is a security fix. The previous release bundled a copy of zlib which had one unfixed vulnerability. The CVE says that it will just cause an application crash: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1849 but the CVE is also in candidate status which means it hasn't been thoroughly analyzed.
-Toshio