ELBA-2025-35287

ELBA-2025-35287 - libxmp Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2025-06-07

Description

[4.6.3-1]
- update to 4.6.3 (resolves rhbz#2365514)
- drop obsolete patch

[4.6.2-3]
- Fix array subscript underflow in Pha Packer loader (CVE-2025-47256).

[4.6.2-2]
- own cmake libxmp dir

[4.6.2-1]
- update to 4.6.2 (resolves rhbz#2347277)

[4.6.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

[4.6.1-1]
- update to 4.6.1 (rhbz#2335113)
- enumerate source licenses and correct License tag

[4.6.0-6]
- convert license to SPDX

[4.6.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[4.6.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[4.6.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[4.6.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[4.6.0-1]
- update to 4.6.0 (#2216871)
- drop obsolete patch
- fix SONAME glob in file list
- include cmake files

[4.5.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[4.5.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[4.5.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[4.5.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[4.5.0-1]
- update to 4.5.0 (#1971814)
- ensure SONAME changes are noticed
- re-enable LTO
- use modern make_* macros

[4.4.1-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[4.4.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[4.4.1-11]
- Disable LTO

[4.4.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[4.4.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[4.4.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[4.4.1-7]
- add BR: gcc for https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
- drop redundant ldconfig scriptlets and use make_install macro

[4.4.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[4.4.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.4.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[4.4.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.4.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4.4.1-1]
- update to 4.4.1 (#1384263)

[4.4.0-1]
- update to 4.4.0 (#1358055)

[4.3.13-1]
- update to 4.3.13 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.13/Changelog/view)
- mark COPYING.LIB with license macro

[4.3.12-1]
- update to 4.3.12 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.12/Changelog/view)

[4.3.11-1]
- update to 4.3.11 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.11/Changelog/view)

[4.3.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[4.3.10-1]
- update to 4.3.10 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.10/Changelog/view)
- use HTTPS for source URL

[4.3.9-1]
- update to 4.3.9 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.9/Changelog/view)

[4.3.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[4.3.8-1]
- update to 4.3.8 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.8/Changelog/view)

[4.3.5-1]
- update to 4.3.5 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.5/Changelog/view)

[4.3.4-1]
- update to 4.3.4 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.4/Changelog/view)

[4.3.2-1]
- update to 4.3.2 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.2/Changelog/view)

[4.3.1-1]
- update to 4.3.1 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.1/Changelog/view)

[4.3.0-1]
- update to 4.3.0 (http://sourceforge.net/projects/xmp/files/libxmp/4.3.0/Changelog/view)

[4.2.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[4.2.8-1]
- update to 4.2.8 (http://sourceforge.net/projects/xmp/files/libxmp/4.2.8/Changelog/view)

[4.2.7-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[4.2.7-1]
- update to 4.2.7 (http://sourceforge.net/projects/xmp/files/libxmp/4.2.7/Changelog/view)

[4.2.5-1]
- update to 4.2.5 (http://sourceforge.net/projects/xmp/files/libxmp/4.2.5/Changelog/view)

[4.2.4-1]
- update to 4.2.4 (http://sourceforge.net/projects/xmp/files/libxmp/4.2.4/Changelog/view)
- drop the list of files with licenses other than LGPLv2.1+,
it's growing too much

[4.2.2-1]
- update to 4.2.2

[4.2.0-1]
- update to 4.2.0 (http://sourceforge.net/projects/xmp/files/libxmp/4.2.0/Changelog/view)
- add proper provides for bundled md5-plumb (version unknown)
- drop any mention of unzoo.c, it's gone from the source

[4.1.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[4.1.5-1]
- update to 4.1.5
- require the same arch of main package for -devel subpackage

[4.1.4-1]
- update to 4.1.4
- drop st02-ok sample from -devel doc (removed by upstream)
- review fixes

[4.1.1-1]
- initial build based on xmp.spec

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libxmp-4.6.3-2.el8.src.rpm	87371a34caaa288a347915f750b4b625c5a9c2672f0a3e19d3d0450613d142e5	-	ol8_aarch64_developer_EPEL
	libxmp-4.6.3-2.el8.aarch64.rpm	f33b6bb7b62c7361d79dd37e96ed642a43d838f993fbe7a045f6fabf1bbbcfc4	-	ol8_aarch64_developer_EPEL
	libxmp-devel-4.6.3-2.el8.aarch64.rpm	04976afbb3d963434115d836a692a6cce01f2e6ed8209901211c6a9390294548	-	ol8_aarch64_developer_EPEL
Oracle Linux 8 (x86_64)	libxmp-4.6.3-2.el8.src.rpm	87371a34caaa288a347915f750b4b625c5a9c2672f0a3e19d3d0450613d142e5	-	ol8_x86_64_developer_EPEL
	libxmp-4.6.3-2.el8.x86_64.rpm	641eefc4cd98cfa6ce167002dad48528865b5d88c9841fd9194a12605e7edccd	-	ol8_x86_64_developer_EPEL
	libxmp-devel-4.6.3-2.el8.x86_64.rpm	678f73ac8246dcd53181c159d74f1bc6e84a44b8bee0a24c9bea2f3c406d6d94	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team