Lector de Feeds

Publication date: 24 Feb 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-49393 , CVE-2024-49394 Description The To and Cc email header fields are not protected by cryptographic signing. (CVE-2024-49393) The In-reply-to email header field is not protected by cryptographic signing. (CVE-2024-49394) References

• https://bugs.mageia.org/show_bug.cgi?id=33814
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZYFPGXOX4Q4I4UNPEGXP2N372IN2YSAS/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49393
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49394

SRPMS 9/core

• neomutt-20241002-1.mga9

Publication date: 24 Feb 2025
Type: bugfix
Affected Mageia releases : 9
Description The current version can't handle files from newer versions. This update fixes the issue. Note the 1st time wizard can't select custom folder for backups, please select it later in Edit -> Preferences References

• https://bugs.mageia.org/show_bug.cgi?id=34029

SRPMS 9/core

• grisbi-3.0.4-1.mga9

Publication date: 22 Feb 2025
Type: bugfix
Affected Mageia releases : 9
Description Instructions to uninstall the telegram application are not accurate. This update fixes the issue. References

• https://bugs.mageia.org/show_bug.cgi?id=32593

SRPMS 9/core

• get-telegram-1.7.7-3.1.mga9

‎Various software: gnome-calculator Workaround up-front

← Older revision Revision as of 18:54, 22 February 2025 Line 361: Line 361:  {{Bug|33697}} - '''Nextcloud client''' - We fail to keep it updated.  Instead, upstream AppImage can be used, see [[Nextcloud-client]]. {{Bug|33697}} - '''Nextcloud client''' - We fail to keep it updated.  Instead, upstream AppImage can be used, see [[Nextcloud-client]].    −{{Bug|34028}} - '''gnome-calculator''' crash, [https://gitlab.gnome.org/GNOME/gnome-calculator/-/issues/359 fix the issue could require new version] and is not sure could be fixed in mageia 9, try one of the alternatives available in our repositories: {{prog|galculator}}, {{prog|mate-calc}}, {{prog|kcalc}}, {{prog|qalculate-gtk}}, {{prog|qalculate-qt}}, also the less good looking {{prog|xcalc}}+{{Bug|34028}} - '''gnome-calculator''' hang on start. '''WORKAROUND:''' Issue {{cmd|gsettings set org.gnome.calculator refresh-interval 0}} before starting it. Or use one of the alternatives available in our repositories: {{prog|galculator}}, {{prog|mate-calc}}, {{prog|kcalc}} or the less good looking {{prog|xcalc}}, or more text based like {{prog|qalculate-gtk}} / {{prog|qalculate-qt}} or {{prog|speedcrunch}}.     <br> <br> Morgano

← Older revision Revision as of 10:48, 22 February 2025 Line 179: Line 179:  | werkt heel goed met Heroic Game Launcher en Proton-GE-Proton 7.51   | werkt heel goed met Heroic Game Launcher en Proton-GE-Proton 7.51    Environment variable : PROTON_USE_WINED3D11=1 Environment variable : PROTON_USE_WINED3D11=1  +  +|-  +| style="width: 5%"| [[File:App-accessories.png|25px|center]]  +| Sniper Ghost Warrior Contracts  +| werkt heel goed met Heroic Game Launcher en Proton-GE-Proton 9.16     |- |- Scroll44

← Older revision Revision as of 10:47, 22 February 2025 Line 176: Line 176:  | marche très bien avec Heroic Game Launcher and Proton-GE-Proton 7.51   | marche très bien avec Heroic Game Launcher and Proton-GE-Proton 7.51    Variable d’environnement : PROTON_USE_WINED3D11=1 Variable d’environnement : PROTON_USE_WINED3D11=1  +  +|-  +| style="width: 5%"| [[File:App-accessories.png|25px|center]]  +| Sniper Ghost Warrior Contracts  +| marche très bien avec Heroic Game Launcher and Proton-GE-Proton 9.16     |- |- Scroll44

← Older revision Revision as of 10:45, 22 February 2025 Line 177: Line 177:  | works very well with Heroic Game Launcher and Proton-GE-Proton 7.51   | works very well with Heroic Game Launcher and Proton-GE-Proton 7.51    Environment variable : PROTON_USE_WINED3D11=1 Environment variable : PROTON_USE_WINED3D11=1  +  +|-  +| style="width: 5%"| [[File:App-accessories.png|25px|center]]  +| Sniper Ghost Warrior Contracts  +| works very well with Heroic Game Launcher and Proton-GE-Proton 9.16     |- |- Scroll44

‎Update notifications: Fix link

← Older revision Revision as of 00:28, 22 February 2025 Line 398: Line 398:  * '''FIXED by [https://advisories.mageia.org/MGAA-2023-0095.html update]''' of mgaonline in {{Bug|32382}}: {{bug|32354}} - In some cases not yet fully understood, the PATH variable is set with /usr/sbin having a higher priority than /usr/bin. ''(Seem to be related to GDM, affecting all desktops.)'' As a consequence, mgaapplet launches urpmi.update without asking for execution privileges and fails. Thus no updates notifications are raised. A workaround is described in bug report. * '''FIXED by [https://advisories.mageia.org/MGAA-2023-0095.html update]''' of mgaonline in {{Bug|32382}}: {{bug|32354}} - In some cases not yet fully understood, the PATH variable is set with /usr/sbin having a higher priority than /usr/bin. ''(Seem to be related to GDM, affecting all desktops.)'' As a consequence, mgaapplet launches urpmi.update without asking for execution privileges and fails. Thus no updates notifications are raised. A workaround is described in bug report.    −* For GNOME, [[#Applet_visibility|Applet visibility]] need to be enabled.+* For GNOME, [[#GNOME|Applet visibility]] need to be enabled.     <br> <br> Katnatek

‎Go: Creating vendor.tar.xz

← Older revision Revision as of 21:36, 21 February 2025 (2 intermediate revisions by the same user not shown)Line 98: Line 98:     The [https://vuln.go.dev/ Go Vulnerability Database] can be used on an ongoing basis to find security issues in Go packages from the SBOMs of those packages. The [https://vuln.go.dev/ Go Vulnerability Database] can be used on an ongoing basis to find security issues in Go packages from the SBOMs of those packages.  +  +Some Go packages already have vendored dependencies (e.g. fzf) stored in a file called ''SOURCES/vendor.tar.xz'' (likely created through some variant of ''go mod download;go mod verify;go mod vendor;tar caf vendor.tar.xz vendor)''. These may also have ''Provide: bundled(golang(...))'' lines that list the vendored packages included, but there seems to be no mechanism to keep those in sync and they don't contain version numbers so they can't be used as a replacement for a proper SBOM.     A possible workflow: A possible workflow: Line 115: Line 117:  * [https://fosdem.org/2025/schedule/event/fosdem-2025-5570-rust-rpms-and-the-fine-art-of-dependency-bundling/ Rust, RPMs, and the Fine Art of Dependency Bundling] * [https://fosdem.org/2025/schedule/event/fosdem-2025-5570-rust-rpms-and-the-fine-art-of-dependency-bundling/ Rust, RPMs, and the Fine Art of Dependency Bundling]  * [https://ml.mageia.org/l/arc/dev/2023-04/msg00579.html Thread on packages with many components/modules/subpackages] * [https://ml.mageia.org/l/arc/dev/2023-04/msg00579.html Thread on packages with many components/modules/subpackages]  +* [https://github.com/openSUSE/obs-service-go_modules OBS method of vendoring Go dependencies]  * [https://vuln.go.dev/ Go Vulnerability Database] * [https://vuln.go.dev/ Go Vulnerability Database]  * [https://guac.sh/ GUAC] SBOM management tool * [https://guac.sh/ GUAC] SBOM management tool Danf

‎Various software

← Older revision Revision as of 16:54, 21 February 2025 Line 361: Line 361:  {{Bug|33697}} - '''Nextcloud client''' - We fail to keep it updated.  Instead, upstream AppImage can be used, see [[Nextcloud-client]]. {{Bug|33697}} - '''Nextcloud client''' - We fail to keep it updated.  Instead, upstream AppImage can be used, see [[Nextcloud-client]].    − +{{Bug|34028}} - '''gnome-calculator''' crash, [https://gitlab.gnome.org/GNOME/gnome-calculator/-/issues/359 fix the issue could require new version] and is not sure could be fixed in mageia 9, try one of the alternatives available in our repositories: {{prog|galculator}}, {{prog|mate-calc}}, {{prog|kcalc}}, {{prog|qalculate-gtk}}, {{prog|qalculate-qt}}, also the less good looking {{prog|xcalc}}     <br> <br> Katnatek

new packages from katnatek and zekemx

← Older revision Revision as of 10:13, 20 February 2025 Line 196: Line 196:  | katnatek || papoteur || [https://ml.mageia.org/l/arc/dev/2023-10/msg00041.html 2023-10-11] || {{yes|Done}} || {{yes|Done}}  || {{yes|Done}} || {{yes|Done}} || lyx<br>mythtv<br>task-plasma5 (spectacle)<br>obconf<br>pidgin-googlechat || {{yes|Done}}  || ||python-setuptools-git-versioning | katnatek || papoteur || [https://ml.mageia.org/l/arc/dev/2023-10/msg00041.html 2023-10-11] || {{yes|Done}} || {{yes|Done}}  || {{yes|Done}} || {{yes|Done}} || lyx<br>mythtv<br>task-plasma5 (spectacle)<br>obconf<br>pidgin-googlechat || {{yes|Done}}  || ||python-setuptools-git-versioning  python-sphinxcontrib-jquery whatsie python-sphinxcontrib-jquery whatsie  +evdi  || ||  |- |- Line 226: Line 227:  | joselp || papoteur,mokraemer || {{yes|Done}} ||  || {{yes|Done}} ||  ||  ||  ||  ||  || photomontage ||   | joselp || papoteur,mokraemer || {{yes|Done}} ||  || {{yes|Done}} ||  ||  ||  ||  ||  || photomontage ||    |- |- −| zekemx || kekepower || {{yes|Done}} ||  || ||  ||  || 1. conky ||  ||  || ||+| zekemx || kekepower || {{yes|Done}} ||  || ||  ||  || 1. conky ||  ||  || displaylink ||  |} |}    Papoteur

Publication date: 20 Feb 2025
Type: bugfix
Affected Mageia releases : 9
Description The updated packages fix some oauth2 problems. References

• https://bugs.mageia.org/show_bug.cgi?id=33950
• https://www.claws-mail.org/NEWS
• https://forums.mageia.org/en/viewtopic.php?t=15558

SRPMS 9/core

• claws-mail-4.3.0-1.mga9

Add Category:Packaging

← Older revision Revision as of 21:13, 19 February 2025 Line 157: Line 157:     Added for mga9. Added for mga9.  +  +  +[[Category:Packaging]] Danf