Lector de Feeds

Publication date: 02 Sep 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-53905 , CVE-2025-53906 Description Path traversal issue with tar.vim and special crafted tar archives in Vim < 9.1.1552. (CVE-2025-53905) Path traversal issue with zip.vim and special crafted zip archives in Vim < v9.1.1551. (CVE-2025-53906) References

• https://bugs.mageia.org/show_bug.cgi?id=34486
• https://www.openwall.com/lists/oss-security/2025/07/15/1
• https://www.openwall.com/lists/oss-security/2025/07/15/2
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53905
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53906

SRPMS 9/core

• vim-9.1.1552-1.mga9

Publication date: 02 Sep 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-6395 , CVE-2025-32988 , CVE-2025-32989 , CVE-2025-32990 Description null pointer dereference in _gnutls_figure_common_ciphersuite(). (CVE-2025-6395) Vulnerability in gnutls othername san export. (CVE-2025-32988) Vulnerability in gnutls sct extension parsing. (CVE-2025-32989) Vulnerability in gnutls certtool template parsing. (CVE-2025-32990) References

• https://bugs.mageia.org/show_bug.cgi?id=34484
• https://www.openwall.com/lists/oss-security/2025/07/11/3
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990

SRPMS 9/core

• gnutls-3.8.4-1.2.mga9

Publication date: 02 Sep 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-54389 , CVE-2025-54409 Description Improper output neutralization (potential AIDE detection bypass). (CVE-2025-54389) Null pointer dereference after reading incorrectly encoded xattr attributes from database (local DoS). (CVE-2025-54409) References

• https://bugs.mageia.org/show_bug.cgi?id=34586
• https://www.openwall.com/lists/oss-security/2025/08/14/7
• https://www.openwall.com/lists/oss-security/2025/08/14/8
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54389
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54409

SRPMS 9/core

• aide-0.18.6-1.1.mga9