Lector de Feeds

Publication date: 22 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-55549 , CVE-2025-24855 Description xsltGetInheritedNsList in libxslt has a use-after-free issue related to exclusion of result prefixes (CVE-2024-55549). numbers.c in libxslt has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal (CVE-2025-24855). References

• https://bugs.mageia.org/show_bug.cgi?id=34113
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZKCQGOW24ZBKSYCIKDUG4KKITEGCJKY2/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55549
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24855

SRPMS 9/core

• libxslt-1.1.38-1.1.mga9

Publication date: 22 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-8176 Description Improper restriction of xml entity expansion depth in libexpat. (CVE-2024-8176) References

• https://bugs.mageia.org/show_bug.cgi?id=34111
• https://www.openwall.com/lists/oss-security/2025/03/14/5
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8176

SRPMS 9/core

• expat-2.7.0-1.mga9

Publication date: 21 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-32661 Description FreeRDP rdp_write_logon_info_v1 NULL access. (CVE-2024-32661) References

• https://bugs.mageia.org/show_bug.cgi?id=34086
• https://ubuntu.com/security/notices/USN-7341-1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32661

SRPMS 9/core

• freerdp-2.11.7-1.1.mga9

Publication date: 21 Mar 2025
Type: bugfix
Affected Mageia releases : 9
Description An incorrect path caused gforthmi to fail to operate by default on x86_64 and aarch64. This update fixes the issue. References

• https://bugs.mageia.org/show_bug.cgi?id=34109

SRPMS 9/core

• gforth-0.7.3-10.1.mga9