Lector de Feeds

Publication date: 08 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-0444 , CVE-2025-0445 , CVE-2025-0451 , CVE-2025-0995 , CVE-2025-0996 , CVE-2025-0997 , CVE-2025-0998 , CVE-2025-0999 , CVE-2025-1426 , CVE-2025-1006 , CVE-2025-1914 , CVE-2025-1915 , CVE-2025-1916 , CVE-2025-1917 , CVE-2025-1918 , CVE-2025-1919 , CVE-2025-1921 , CVE-2025-1922 Description High CVE-2025-1914: Out of bounds read in V8. Medium CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools. Medium CVE-2025-1916: Use after free in Profiles. Medium CVE-2025-1917: Inappropriate Implementation in Browser UI. Medium CVE-2025-1918: Out of bounds read in PDFium. Medium CVE-2025-1919: Out of bounds read in Media. Medium CVE-2025-1921: Inappropriate Implementation in Media Low CVE-2025-1922: Inappropriate Implementation in Selection. Low CVE-2025-1923: Inappropriate Implementation in Permission Prompts. And more, please see the references. References

• https://bugs.mageia.org/show_bug.cgi?id=34012
• https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html
• https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_25.html
• https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_18.html
• https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html
• https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0444
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0445
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0451
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0995
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0996
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0997
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0998
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0999
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1426
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1006
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1914
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1915
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1916
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1917
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1918
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1919
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1921
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1922

SRPMS 9/tainted

• chromium-browser-stable-134.0.6998.35-1.mga9.tainted

Publication date: 08 Mar 2025
Type: bugfix
Affected Mageia releases : 9
Description Some external applications search for libevent-2.1.so.7 and fail to start. This update adds the file, fixing the issue. References

• https://bugs.mageia.org/show_bug.cgi?id=34063

SRPMS 9/core

• libevent-2.1.12-4.1.mga9

Publication date: 08 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2023-5520 , CVE-2024-0321 , CVE-2024-0322 Description Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. (CVE-2023-5520) Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. (CVE-2024-0321) Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. (CVE-2024-0322) References

• https://bugs.mageia.org/show_bug.cgi?id=34071
• https://ubuntu.com/security/notices/USN-7320-1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5520
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0321
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0322

SRPMS 9/tainted

• gpac-2.2.1-1.2.mga9.tainted