Lector de Feeds

← Older revision Revision as of 23:10, 28 June 2025 Line 286: Line 286:     {{Bug|34029}} - '''grisbi''' Wir aktualisieren grisbi, um Nutzern, welche von anderen Distributionen kommen, welche die Version 3.0.4 einsetzen, eine Kompatibilität anzubieten. Allerdings kann der 1st time wizard kein benutzerdefiniertes Verzeichnis für Sicherungen auswählen. Bitte wählen Sie dieses später unter Bearbeiten -> Einstellungen aus. {{Bug|34029}} - '''grisbi''' Wir aktualisieren grisbi, um Nutzern, welche von anderen Distributionen kommen, welche die Version 3.0.4 einsetzen, eine Kompatibilität anzubieten. Allerdings kann der 1st time wizard kein benutzerdefiniertes Verzeichnis für Sicherungen auswählen. Bitte wählen Sie dieses später unter Bearbeiten -> Einstellungen aus.  +  +'''BEHOBEN durch eine Aktualisierung''' {{Bug|34351}} - '''muse''' Bei einigen Desktop-Umgebungen friert muse ein, wenn eine benutzerdefinierte Farbe für einen Track ausgewählt wird. Die gewählte Methode um dieses Problem zu beheben hat einen Seiteneffekt im qt5ct Paket. Näheres hierzu im [https://advisories.mageia.org/MGAA-2025-0064.html advisory].     === Externe Software === === Externe Software === Psyca

‎Various software: Add muse

← Older revision Revision as of 22:59, 28 June 2025 Line 368: Line 368:     {{Bug|34029}} - '''grisbi''' We update grisbi to offer compatibility to users comming from other distributions that have the 3.0.4 version, but the 1st time wizard can't select custom folder for backups, please select it later in Edit -> Preferences {{Bug|34029}} - '''grisbi''' We update grisbi to offer compatibility to users comming from other distributions that have the 3.0.4 version, but the 1st time wizard can't select custom folder for backups, please select it later in Edit -> Preferences  +  +'''FIXED BY UPDATE''' {{Bug|34351}} - '''muse''' In some desktops, Muse freezes when you set a custom color for a track. The selected method to fix the issue have a side effect in the qt5ct package see the [https://advisories.mageia.org/MGAA-2025-0064.html advisory].     <br> <br> Katnatek

Point to e-mail

← Older revision Revision as of 21:23, 28 June 2025 Line 8: Line 8:     Documentation for the full rebuild process is TBD. Documentation for the full rebuild process is TBD.  +  +See [https://ml.mageia.org/l/msg/sysadmin-discuss/2025-06/PLKqH37EC2YbQjvDencaWg this thread] for more info.     == See Also == == See Also == Danf

← Older revision Revision as of 13:05, 28 June 2025 (One intermediate revision by the same user not shown)Line 61: Line 61:   ],  ],  </nowiki>}} </nowiki>}} −* Add a iurt account on the system and add schedbot@duvel ssh public key to iurt@lavand authorized_keys file.  −{{pre|<nowiki>ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD74XjxAUlKsEQngCGQ7uG1waCkd26ZbzUSUHdnQ3VGLxK2X8VTpDAN1xAxrQM2bTmED1o1y3UhI5n3QicJspB8DZUS7CW93bsE6GrIqh9e1HVbZXzV20esU2r68I5GUsBXXS5EQkUQfESAtAvL9cSARo/ZXiJ6yeX5OiFKofD6i1WnkboP6HM3fdG+vNZV5EYq1MU33NOUYR8HMMNFjcAiVpBjM++x1I+rIKro6l3jFKgBMfC1+afAB2o7en3CuqJtpcspb3A8wIKxXLWWK/aU5U8WK2lbixBzNWDb1Ug3HH7/DQdhZsZUe7U5bRlMe9U6OkJasOOeGqAuWrO6kcoN schedbot  −</nowiki>}}  −* Add the iurt and puppet packages on the build node      Then on the Mageia infra repository, that you modify the following way: Then on the Mageia infra repository, that you modify the following way: Line 119: Line 115:  </nowiki>}} </nowiki>}}    −* Add the build node to the ones allowaed to acces the repo+* Add the build node to the ones allowed to acces the repo  {{pre|<nowiki> $repo_allow_from_ips = [ {{pre|<nowiki> $repo_allow_from_ips = [  [...] [...] Line 126: Line 122:  </nowiki>}} </nowiki>}}    −* Finally add your build node to the list for right architecture and to the list of aliases in the same file config.pp:+* Before committing, check your modifications:  +{{pre|<nowiki>git diff  +git add -p  +puppet parser validate manifests/nodes/duvel.pp  +puppet parser validate manifests/nodes/sucuk.pp  +puppet parser validate manifests/nodes/neru.pp  +git commmit -m 'Add a new build node lavand to the infra'  +</nowiki>}}  +The parser validate commands will check the build system for duvel and the DNS configuration for sucuk and neru.  +   +* After the permissions have propagated, add the appropriate internal repository, currently infra_9 for Mageia 9  +{{pre|<nowiki>urpmi.addmedia infra_9 http://repository.mageia.org/distrib/infra_9/aarch64/media/infra/updates  +</nowiki>}}  +   +* Add the iurt and puppet packages on the build node, they should come from the infra repository  +{{pre|<nowiki>urpmi iurt puppet  +</nowiki>}}  +   +* Allow the machine to connect to puppet on duvel  +{{pre|<nowiki>iptables -A INPUT -s x.y.z.t/32 -p tcp -m tcp --dport 8140 -j ACCEPT  +</nowiki>}}  +   +* Register the machine with puppet and apply the config  +{{pre|<nowiki>puppet agent --test --verbose --waitforcert 240  +</nowiki>}}  +   +* While it is waiting, in another terminal on duvel accept and sign the certificate generated  +{{pre|<nowiki>  +puppet ca list  +puppet ca sign lavand.mageia.org  +</nowiki>}}  +   +* Finally add your build node to the list for right architecture in puppet config deployment/mga_buildsystem/manifests/config.pp:  {{pre|<nowiki>build_nodes        => { {{pre|<nowiki>build_nodes        => {  [...] [...] Line 139: Line 167:  The scheduler is rather basic and builds only a package at a time. So having multiple "virtual" entries (named 0, 1, ...) allows to build multiple packages on the same physical build node. The scheduler is rather basic and builds only a package at a time. So having multiple "virtual" entries (named 0, 1, ...) allows to build multiple packages on the same physical build node.    −* Before committing, check your modifications:  −{{pre|<nowiki>git diff  −git add -p  −puppet parser validate manifests/nodes/duvel.pp  −puppet parser validate manifests/nodes/sucuk.pp  −puppet parser validate manifests/nodes/neru.pp  −git commmit -m 'Add a new build node lavand to the infra'  −</nowiki>}}  −The parser validate commands will check the build system for duvel and the DNS configuration for sucuk and neru.      [[Category:Sysadmin]] [[Category:Sysadmin]] Pterjan

Add nospace

← Older revision Revision as of 06:57, 28 June 2025 Line 107: Line 107:     Added for mga8. Added for mga8.  +  +== nospace ==  +  +'''Problem''': The disk ran out of space while the build was in progress.  +  +'''Solution''': The build must be re-run (without change to the package) after sufficient disk space has been restored on the server. If the package requires an extraordinary amount of space for a build, the spec file should be adjusted to reduce the peak space demand, if possible. This might be done by removing unnecessary temporary files between sections of the build process, by deleting large, unneeded files before building begins, or by disabling parallel building.  +  +Added for mga10.     == ocamlunsafestring == == ocamlunsafestring == Danf

← Older revision Revision as of 21:38, 27 June 2025 Line 1: Line 1:  [[Category:Dokumentation]] [[Category:Dokumentation]]  [[Category:Mirrors]] [[Category:Mirrors]]  +[[Category:Sysadmin]]     {{Multi_language_banner-de|[[Spiegelserver Liste-de|Deutsch]] ; [[Mirror_List|English]] ; [[Liste des miroirs-fr|français]] ; [[Spiegelserverlijst-nl|Nederlands]] ; [[Yansı Listesi|Turkisk]] ; [[Listas de espelhos-pt-BR|português brasileiro]] ;}} {{Multi_language_banner-de|[[Spiegelserver Liste-de|Deutsch]] ; [[Mirror_List|English]] ; [[Liste des miroirs-fr|français]] ; [[Spiegelserverlijst-nl|Nederlands]] ; [[Yansı Listesi|Turkisk]] ; [[Listas de espelhos-pt-BR|português brasileiro]] ;}} Psyca

Publication date: 27 Jun 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-6199 Description It was discovered that incorrect bounds validation in the GIF decoder of the GDK Pixbuf library may result in memory disclosure. References

• https://bugs.mageia.org/show_bug.cgi?id=34388
• https://lists.debian.org/debian-security-announce/2025/msg00110.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6199

SRPMS 9/core

• gdk-pixbuf2.0-2.42.10-2.2.mga9

Publication date: 27 Jun 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-5262 , CVE-2025-5263 , CVE-2025-5264 , CVE-2025-5266 , CVE-2025-5267 , CVE-2025-5268 , CVE-2025-5269 , CVE-2025-5986 Description CVE-2025-5262: A double-free could have occurred in vpx_codec_enc_init_multi after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. CVE-2025-5263: Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. CVE-2025-5264: Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. CVE-2025-5266: Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. CVE-2025-5267: A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. CVE-2025-5268: Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. CVE-2025-5269: Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. CVE-2025-5986: A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content. We can't ship this update to armv7hl architecture, we are investigating the issue and will try to update thunderbird for armv7hl as soon as posible. References

• https://bugs.mageia.org/show_bug.cgi?id=34338
• https://www.thunderbird.net/en-US/thunderbird/128.11.0esr/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/
• https://www.thunderbird.net/en-US/thunderbird/128.11.1esr/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5262
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5263
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5264
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5266
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5267
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5268
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5269
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5986

SRPMS 9/core

• thunderbird-128.11.1-1.1.mga9
• thunderbird-l10n-128.11.1-1.mga9

hs-esslingen.de

← Older revision Revision as of 00:33, 27 June 2025 Line 27: Line 27:  | [http://ftp.nluug.nl/pub/os/Linux/distr/mageia/ https://ftp.nluug.nl/]|| NLUUG || Groningen || ftp-admin || ftp-admin [AT] nluug [DOT] nl ||   | [http://ftp.nluug.nl/pub/os/Linux/distr/mageia/ https://ftp.nluug.nl/]|| NLUUG || Groningen || ftp-admin || ftp-admin [AT] nluug [DOT] nl ||    |- |- −| [https://mirror.math.princeton.edu/pub/mageia/ https://mirror.math.princeton.edu/]|| Princeton || Princeton || Benjamin Rose || benrose [AT] math [DOT] princeton [DOT] edu || 1st tier mirror+| [https://mirror.math.princeton.edu/pub/mageia/ https://mirror.math.princeton.edu/]|| Princeton || Princeton || Benjamin Rose || benrose [AT] math [DOT] princeton [DOT] edu || 1st tier mirror    |- |-  | [https://ftp.snt.utwente.nl/pub/os/linux/mageia/ https://ftp.snt.utwente.nl/] || Twente ||  Twente ||ftpcom || ftpcom [AT] snt [DOT] utwente [DOT] nl || | [https://ftp.snt.utwente.nl/pub/os/linux/mageia/ https://ftp.snt.utwente.nl/] || Twente ||  Twente ||ftpcom || ftpcom [AT] snt [DOT] utwente [DOT] nl ||  +|-  +| [https://ftp-stud.hs-esslingen.de/pub/Mirrors/Mageia/ https://ftp-stud.hs-esslingen.de/] || Esslingen || Esslingen a.N. ||  ||  || [https://ftp-stud.hs-esslingen.de/info/status.php4?details=77 sync log]  |} |} Danf