Lector de Feeds

Publication date: 29 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-52885 Description Use After Free (UAF) in Poppler. (CVE-2025-52885) References

• https://bugs.mageia.org/show_bug.cgi?id=34668
• https://www.openwall.com/lists/oss-security/2025/10/13/2
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52885

SRPMS 9/core

• poppler-23.02.0-1.8.mga9

Publication date: 29 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-55752 , CVE-2025-55754 , CVE-2025-61795 Description Directory traversal via rewrite with possible RCE if PUT is enabled. (CVE-2025-55752) Console manipulation via escape sequences in log messages. (CVE-2025-55754) Delayed cleaning of multi-part upload temporary files may lead to DoS. (CVE-2025-61795) References

• https://bugs.mageia.org/show_bug.cgi?id=34699
• https://www.openwall.com/lists/oss-security/2025/10/27/4
• https://www.openwall.com/lists/oss-security/2025/10/27/5
• https://www.openwall.com/lists/oss-security/2025/10/27/6
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55752
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795

SRPMS 9/core

• tomcat-9.0.111-1.mga9

Publication date: 27 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-5222 Description A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. References

• https://bugs.mageia.org/show_bug.cgi?id=34442
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KB5WTHV4QSRRUVG6KMSV4Z2FIQKSWR54/
• https://lists.debian.org/debian-security-announce/2025/msg00115.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5222

SRPMS 9/core

• icu-73.2-1.2.mga9

Publication date: 27 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-49133 Description It was discovered that libtpms had a potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133). References

• https://bugs.mageia.org/show_bug.cgi?id=34396
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XITIPFJQFQIYBAV5Y3UA5AL6T5ATFDFX/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49133

SRPMS 9/core

• libtpms-0.9.6-1.1.mga9

added a link in line 15, that Morgano inserted.

← Older revision Revision as of 12:59, 26 October 2025 Line 19: Line 19:  Eén specifiek veeleisende taak is het beheer van het Mageia-systeem van programma-pakketten afhandelt. Dit is daarom een van de tests die we uitvoeren. De lees- en schrijfsnelheden bij het installeren of verwijderen van programma-pakketten kan ruim een factor tien variëren tussen opslag-apparaten die op de markt worden gebracht met dezelfde aanhoudende schrijfsnelheid! Eén specifiek veeleisende taak is het beheer van het Mageia-systeem van programma-pakketten afhandelt. Dit is daarom een van de tests die we uitvoeren. De lees- en schrijfsnelheden bij het installeren of verwijderen van programma-pakketten kan ruim een factor tien variëren tussen opslag-apparaten die op de markt worden gebracht met dezelfde aanhoudende schrijfsnelheid!    −Het is moeilijk om op internet gegevens te vinden over snelheden voor het schrijven van veel kleine bestanden. Eén bron is https://usb.userbenchmark.com/, gesorteerd op kolom "Peak 4k W". In test "A" hieronder voor het verwijderen van pakketten, bleek het verschil in snelheid zelfs groter dan het verschil in die snelheidscores, waarschijnlijk omdat in test "A" veel kleinere datapakketjes werden geschreven.+Het is moeilijk om op internet gegevens te vinden over snelheden voor het schrijven van veel kleine bestanden. Eén bron is https://usb.userbenchmark.com/, gesorteerd op kolom "Peak 4k W". In onze test "A" hieronder, voor het verwijderen van pakketten, bleek het verschil in snelheid zelfs groter dan het verschil in die snelheidscores, waarschijnlijk omdat in test "A" veel kleinere datapakketjes werden geschreven.  +Hier vindt u een website die vele usb-sticks test, maar niet speciaal met kleine schrijfacties:  +https://ssd-tester.com/usb_flash_drive_test.php     == Discrepanties == == Discrepanties == Marchugo

‎Backport kernels: word, version

← Older revision Revision as of 22:36, 25 October 2025 Line 76: Line 76:  kernel-stable-desktop-6.12... <br> kernel-stable-desktop-6.12... <br>  kernel-stable-desktop-devel-6.12... ''(If you need it, i.e if your other kernels also have corresponding -devel- packages installed.)'' <br> kernel-stable-desktop-devel-6.12... ''(If you need it, i.e if your other kernels also have corresponding -devel- packages installed.)'' <br> −- Also note you need the suggested relevant -latest packages too for easy future updating. (In contrast to mga9 6.6 kernels that do not ''need'' them, due to a different naming scheme.)+- Also note you need the suggested corresponding -latest packages too for easy future updating. (In contrast to mga9 6.6 kernels that do not ''need'' them, due to a different naming scheme.)     '''Keep having latest non-backport''' lib64bpf1, cpupower, kernel-userspace-headers installed, and keep them updated.  ''- we do not backport lib64bpf1 and cpupower, to not break compatibility with non-backport kernels.'' '''Keep having latest non-backport''' lib64bpf1, cpupower, kernel-userspace-headers installed, and keep them updated.  ''- we do not backport lib64bpf1 and cpupower, to not break compatibility with non-backport kernels.''    −'''Regarding kernel-stable-userspace-headers''' contra ''kernel-userspace-headers for 6.6 kernels:'' The packages are used for building applications; use the one for the current kernel you build for. They conflict each other and are handled correctly by urpmi & drakrpm - when you have '''updated mageia-repos and meta-task packages''' to 9.4 versions (at time of writing found in updates_testing) - and using kernel versions 6.6.104+ and 6.12.44+.+'''Regarding kernel-stable-userspace-headers''' contra ''kernel-userspace-headers for 6.6 kernels:'' The packages are used for building applications; use the one for the current kernel you build for. They conflict each other and are handled correctly by urpmi & drakrpm - when you have '''updated mageia-repos and meta-task packages''' to 9.4 versions (at time of writing found in updates_testing) - and using kernel versions 6.6.105+ and 6.12.44+.     '''Remove-Old-Kernels''', {{prog|rok}}, do currently not see nor handle 6.12 kernels, so you need to manually uninstall excess kernels when needed to save space - like you did for any kernels before rok was introduced with Mageia 9.  Or, '''make it work''' by adding to {{file|/etc/remove-old-kernels.cfg}}: In the list under the line "LISTK=\", add <br> kernel-stable-desktop <br> kernel-stable-desktop-devel <br> kernel-stable-source '''Remove-Old-Kernels''', {{prog|rok}}, do currently not see nor handle 6.12 kernels, so you need to manually uninstall excess kernels when needed to save space - like you did for any kernels before rok was introduced with Mageia 9.  Or, '''make it work''' by adding to {{file|/etc/remove-old-kernels.cfg}}: In the list under the line "LISTK=\", add <br> kernel-stable-desktop <br> kernel-stable-desktop-devel <br> kernel-stable-source Morgano