The following Fedora EPEL 8 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ab11f6d0c5
lua-http-0.3-6.el8
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ecb2c4b05c
libmodsecurity-3.0.14-8.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
libxmp-4.6.3-2.el8
Details about builds:
================================================================================
libxmp-4.6.3-2.el8 (FEDORA-EPEL-2025-ccb0435da4)
A multi-format module playback library
--------------------------------------------------------------------------------
Update Information:
Latest upstream stable release. Backwards ABI and API compatible. Resolves
CVE-2025-47256 .
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 24 2025 Dominik Mierzejewski <[email protected]> - 4.6.3-1
- update to 4.6.3 (resolves rhbz#2365514)
- drop obsolete patch
* Wed May 7 2025 Michael Schwendt <[email protected]> - 4.6.2-3
- Fix array subscript underflow in Pha Packer loader (CVE-2025-47256).
* Wed May 7 2025 Michael Schwendt <[email protected]> - 4.6.2-2
- own cmake libxmp dir
* Wed Feb 26 2025 Dominik 'Rathann' Mierzejewski <[email protected]> -
4.6.2-1
- update to 4.6.2 (resolves rhbz#2347277)
* Mon Jan 20 2025 Fedora Release Engineering <[email protected]> -
4.6.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Thu Jan 2 2025 Dominik Mierzejewski <[email protected]> - 4.6.1-1
- update to 4.6.1 (rhbz#2335113)
- enumerate source licenses and correct License tag
* Mon Sep 2 2024 Miroslav Suchý <[email protected]> - 4.6.0-6
- convert license to SPDX
* Thu Jul 18 2024 Fedora Release Engineering <[email protected]> -
4.6.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Thu Jan 25 2024 Fedora Release Engineering <[email protected]> -
4.6.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> -
4.6.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jul 20 2023 Fedora Release Engineering <[email protected]> -
4.6.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jul 5 2023 Dominik Mierzejewski <[email protected]> - 4.6.0-1
- update to 4.6.0 (#2216871)
- drop obsolete patch
- fix SONAME glob in file list
- include cmake files
* Thu Jan 19 2023 Fedora Release Engineering <[email protected]> -
4.5.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <[email protected]> -
4.5.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <[email protected]> -
4.5.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <[email protected]> -
4.5.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jun 22 2021 Dominik Mierzejewski <[email protected]> - 4.5.0-1
- update to 4.5.0 (#1971814)
- ensure SONAME changes are noticed
- re-enable LTO
- use modern make_* macros
* Tue Jan 26 2021 Fedora Release Engineering <[email protected]> -
4.4.1-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <[email protected]> -
4.4.1-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jul 1 2020 Jeff Law <[email protected]> - 4.4.1-11
- Disable LTO
* Wed Jan 29 2020 Fedora Release Engineering <[email protected]> -
4.4.1-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2364610 - CVE-2025-47256 libxmp: stack-based buffer overflow via a
malformed Pha format tracker module [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=2364610
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
