Debian Patches

Status for libxmp/4.6.2-2

Patch Description Author Forwarded Bugs Origin Last update
cmake-multiarch-paths.patch Adjust cmake paths for multiarch
libxmp_root is supposed to point to /usr; with multiarch, the cmake
files end up in /usr/lib/<arch>/cmake/libxmp, so the relative path
needs to go up an additional level.
Stephen Kitt <skitt@debian.org> no
drop-googleapis.patch Drop the Google fonts import Stephen Kitt <skitt@debian.org> not-needed
cve-2025-47256.patch commit 004a102c5a75ad809fc309ff73ce8d0f9ab3e456

Fix array subscript underflow in Pha Packer loader (CVE-2025-47256). (#848)

The array iterator k can be fed a garbage initial value that allows
it to overflow to INT_MIN - 1 in some circumstances. This, paired
with truncated modulo being used instead of AND, leads to array
underflows of onote and ocpt. The initial value of k doesn't actually
matter, so I've changed it to 0 to match the last upstream I have
available.
Alice R. <petrifiedrowan@gmail.com> no 2025-05-06

All known versions for source package 'libxmp'

Links