Lector de Feeds

Publication date: 09 Jun 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-6126 Description Mageia's internal bug: In the current version you can't login in the web interface with firefox or chromium-browser packaged by Mageia. This update fixes the issue, but it is reported that could need to reboot and clear cookies from your browser. A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack - CVE-2024-6126. Please note that you need to edit /etc/nsswitch.conf as recommended in https://bugs.mageia.org/show_bug.cgi?id=33368#c18. References

• https://bugs.mageia.org/show_bug.cgi?id=33368
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6126

SRPMS 9/core

• cockpit-338-1.6.mga9

Publication date: 09 Jun 2025
Type: bugfix
Affected Mageia releases : 9
Description Since the update of bluez to 5.80 devices like mouse/keyboard do not reconnect after suspend or reboot. Only repairing helps to make them work. References

• https://bugs.mageia.org/show_bug.cgi?id=34167

SRPMS 9/core

• bluez-5.82-1.mga9

Publication date: 08 Jun 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-46337 Description ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9 - CVE-2025-46337. References

• https://bugs.mageia.org/show_bug.cgi?id=34339
• https://ubuntu.com/security/notices/USN-7530-1
• https://github.com/ADOdb/ADOdb/releases/tag/v5.22.9
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46337

SRPMS 9/core

• php-adodb-5.22.9-1.mga9

Publication date: 08 Jun 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-4598 Description Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump. (CVE-2025-4598) References

• https://bugs.mageia.org/show_bug.cgi?id=34331
• https://openwall.com/lists/oss-security/2025/05/29/3
• https://lists.debian.org/debian-security-announce/2025/msg00095.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4598

SRPMS 9/core

• systemd-253.33-1.mga9

Publication date: 08 Jun 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-46701 Description Security constraint bypass for CGI scripts. (CVE-2025-46701) References

• https://bugs.mageia.org/show_bug.cgi?id=34332
• https://openwall.com/lists/oss-security/2025/05/29/4
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701

SRPMS 9/core

• tomcat-9.0.105-1.mga9