The following Fedora EPEL 8 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ab11f6d0c5 lua-http-0.3-6.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ecb2c4b05c libmodsecurity-3.0.14-8.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing libxmp-4.6.3-2.el8 Details about builds: ================================================================================ libxmp-4.6.3-2.el8 (FEDORA-EPEL-2025-ccb0435da4) A multi-format module playback library -------------------------------------------------------------------------------- Update Information: Latest upstream stable release. Backwards ABI and API compatible. Resolves CVE-2025-47256 . -------------------------------------------------------------------------------- ChangeLog: * Sat May 24 2025 Dominik Mierzejewski <dominik@xxxxxxxxxxxxxx> - 4.6.3-1 - update to 4.6.3 (resolves rhbz#2365514) - drop obsolete patch * Wed May 7 2025 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 4.6.2-3 - Fix array subscript underflow in Pha Packer loader (CVE-2025-47256). * Wed May 7 2025 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 4.6.2-2 - own cmake libxmp dir * Wed Feb 26 2025 Dominik 'Rathann' Mierzejewski <dominik@xxxxxxxxxxxxxx> - 4.6.2-1 - update to 4.6.2 (resolves rhbz#2347277) * Mon Jan 20 2025 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.6.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Thu Jan 2 2025 Dominik Mierzejewski <dominik@xxxxxxxxxxxxxx> - 4.6.1-1 - update to 4.6.1 (rhbz#2335113) - enumerate source licenses and correct License tag * Mon Sep 2 2024 Miroslav Suchý <msuchy@xxxxxxxxxx> - 4.6.0-6 - convert license to SPDX * Thu Jul 18 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.6.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Thu Jan 25 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.6.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.6.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jul 20 2023 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.6.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jul 5 2023 Dominik Mierzejewski <dominik@xxxxxxxxxxxxxx> - 4.6.0-1 - update to 4.6.0 (#2216871) - drop obsolete patch - fix SONAME glob in file list - include cmake files * Thu Jan 19 2023 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.5.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Jul 21 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.5.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.5.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Jun 22 2021 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 4.5.0-1 - update to 4.5.0 (#1971814) - ensure SONAME changes are noticed - re-enable LTO - use modern make_* macros * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.4.1-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.4.1-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jul 1 2020 Jeff Law <law@xxxxxxxxxx> - 4.4.1-11 - Disable LTO * Wed Jan 29 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.4.1-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2364610 - CVE-2025-47256 libxmp: stack-based buffer overflow via a malformed Pha format tracker module [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2364610 --------------------------------------------------------------------------------
-- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
