Lector de Feeds

restore the alphabetical order in the language banner

← Older revision Revision as of 06:14, 5 June 2025 Line 4: Line 4:  <!-- disable this so it's not in release note of isos medias--> <!-- disable this so it's not in release note of isos medias-->    −{{multi language banner|[[Mageia 9 Veröffentlichungshinweise-de|Deutsch]] ; [[Mageia 9 Release Notes|English]] ; [[Notas_sobre_Mageia_9-es|Español]] ; [[Mageia_9_Notes_de_version-fr|Français]] ; [[Mageia 9 uitgave-opmerkingen-nl|Nederlands]] ; [[Mageia 9 Notas de Lançamento pt-PT|Português (Portugal)]] ; [[Notas de lançamento do Mageia 9-pt-BR|português brasileiro]] ;}}+{{multi language banner|[[Mageia 9 Veröffentlichungshinweise-de|Deutsch]] ; [[Mageia 9 Release Notes|English]] ; [[Notas_sobre_Mageia_9-es|Español]] ; [[Mageia_9_Notes_de_version-fr|Français]] ; [[Mageia 9 uitgave-opmerkingen-nl|Nederlands]] ; [[Notas de lançamento do Mageia 9-pt-BR|português brasileiro]] ; [[Mageia 9 Notas de Lançamento pt-PT|Português (Portugal)]] ;}}     {{introduction|Presentation of the evolution, new features, known issues, and the recent changes of the Mageia distribution.}} {{introduction|Presentation of the evolution, new features, known issues, and the recent changes of the Mageia distribution.}} Marja

Publication date: 02 Jun 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-22870 , CVE-2025-22871 Description Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied - CVE-2025-22870. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext - CVE-2025-22871. References

• https://bugs.mageia.org/show_bug.cgi?id=34078
• https://www.openwall.com/lists/oss-security/2025/03/07/2
• https://www.openwall.com/lists/oss-security/2025/04/04/4
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FFNTP3P4URUREHKSWZQWIJPIXGRCFHUI/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22870
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22871

SRPMS 9/core

• golang-1.23.8-1.mga9

Publication date: 02 Jun 2025
Type: bugfix
Affected Mageia releases : 9
Description mesa-25.0.5-1 introduced a bug that makes Extreme Tuxracer crash on some hardware. This update fixes the reported issue. References

• https://bugs.mageia.org/show_bug.cgi?id=34304

SRPMS 9/core

• mesa-25.0.6-5.mga9
• rust-cbindgen-0.26.0-0.1.mga9

9/tainted

• mesa-25.0.6-5.mga9.tainted