Lector de Feeds

Publication date: 08 Dec 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-66293 Description LIBPNG has an out-of-bounds read in png_image_read_composite. (CVE-2025-66293) References

• https://bugs.mageia.org/show_bug.cgi?id=34799
• https://www.openwall.com/lists/oss-security/2025/12/03/5
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293

SRPMS 9/core

• libpng-1.6.38-1.2.mga9

Publication date: 08 Dec 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-55753 , CVE-2025-58098 , CVE-2025-65082 , CVE-2025-66200 Description Apache HTTP Server: mod_md (ACME), unintended retry intervals. (CVE-2025-55753) Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. (CVE-2025-58098) Apache HTTP Server: CGI environment variable override. (CVE-2025-65082) Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo. (CVE-2025-66200) References

• https://bugs.mageia.org/show_bug.cgi?id=34803
• https://www.openwall.com/lists/oss-security/2025/12/04/4
• https://www.openwall.com/lists/oss-security/2025/12/04/5
• https://www.openwall.com/lists/oss-security/2025/12/04/7
• https://www.openwall.com/lists/oss-security/2025/12/04/8
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55753
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58098
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65082
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66200

SRPMS 9/core

• apache-2.4.66-1.mga9

updated email address

← Older revision Revision as of 12:49, 8 December 2025 Line 79: Line 79:  * schultz - Donald Stewart - watersnowrock at gmail dot com * schultz - Donald Stewart - watersnowrock at gmail dot com    −* dtux - Daniel Tartavel - contact at librepc dot com+* dtux - Daniel Tartavel - dtux at free dot fr     * neoser10 - Mauricio Andres Bustamante Viveros - neoser10 at hotmail dot com * neoser10 - Mauricio Andres Bustamante Viveros - neoser10 at hotmail dot com Dtux

‎For Qa team:

← Older revision Revision as of 01:51, 8 December 2025 Line 126: Line 126:     * wilcal - Bill Kenney - wilcal dot int at gmail dot com * wilcal - Bill Kenney - wilcal dot int at gmail dot com  +  +* LpSolit - Frédéric Buclin - lpsolit at gmail dot com Lpsolit

typo

← Older revision Revision as of 22:53, 7 December 2025 (One intermediate revision by the same user not shown)Line 121: Line 121:  * marchugo - Marc Laan - laan dot marc at gmail dot com * marchugo - Marc Laan - laan dot marc at gmail dot com    −* katmatek - José Alberto - j.alberto.vc at gmail dot com+* katnatek - José Alberto - j.alberto.vc at gmail dot com     * marcpare - Marc Paré - marc.pare at parentreprise dot com * marcpare - Marc Paré - marc.pare at parentreprise dot com  +  +* wilcal - Bill Kenney - wilcal dot int at gmail dot com Tandrews16

‎For BugSquad:: delete old members and add comment

← Older revision Revision as of 13:29, 7 December 2025 (2 intermediate revisions by the same user not shown)Line 25: Line 25:     =='''QA-team, Bugsquad and Packaging-team leaders/council representatives:'''== =='''QA-team, Bugsquad and Packaging-team leaders/council representatives:'''== −* MrsB - Claire Robinson - eeeemail at gmail dot com+  −* davidwhodgins - Dave Hodgins - davidwhodgins at gmail dot com+* bcornec - Bruno Cornec - bruno at musique-ancienne dot org  +   +* joselp - Jose López - joselp at e dot email  +   * lewyssmith - Lewis - lewyssmith at laposte dot net * lewyssmith - Lewis - lewyssmith at laposte dot net −* wilcal - Bill Kenney - wilcal dot int at gmail dot com+  −* stormi - Samuel Verschelde - stormi at laposte dot net   * marja - Marja van Waes - marja11 at freedom dot nl * marja - Marja van Waes - marja11 at freedom dot nl −* akien - Rémi Verschelde - rverschelde@gmail.com+   * MageiaTJ - Thomas J Andrews - andrewsfarm at gmail dot com<br/><br/> * MageiaTJ - Thomas J Andrews - andrewsfarm at gmail dot com<br/><br/>     =='''Desktop environment maintainers:'''== =='''Desktop environment maintainers:'''== −* KDE - neoclust - Nicolas Lécureuil  - neoclust at mageia dot org   * KDE - daviddavid - David Geiger - geiger.david68210 at gmail dot com * KDE - daviddavid - David Geiger - geiger.david68210 at gmail dot com −* Gnome - ovitters - Olav Vitters - olav at vitters dot nl+* Gnome - tv - Thierry Vignaud - thierry.vignaud at gmail dot com  * XFCE - wally_ - Jani Välimaa - wally at mageia dot org   * XFCE - wally_ - Jani Välimaa - wally at mageia dot org    * Cinnamon - jquant - Joseph Wang - joequant at gmail dot com * Cinnamon - jquant - Joseph Wang - joequant at gmail dot com −<!-- * Mate - tarakbumba - Atilla ÖNTAŞ - tarakbumba at gmail dot com - TO BE REPLACED. Removed from cc list -->   * LXDE - ns80 - Nicolas Salguero - nicolas dot salguero at laposte dot net<br/><br/> * LXDE - ns80 - Nicolas Salguero - nicolas dot salguero at laposte dot net<br/><br/>    Line 54: Line 54:     ==='''For BugSquad:'''=== ==='''For BugSquad:'''=== −*Chromo - Nic Baxter - nic at nicbaxter dot com dot au+Some are already listed as QA team member or team leader of some involved teams. −*auroud_85 - Aurélien Oudelet - ouaurelien at gmail dot com+If no one else steps forward, then this section will be removed.     ==='''For Qa team:'''=== ==='''For Qa team:'''=== Marja

‎2025: Update the packagers' entry

← Older revision Revision as of 13:08, 7 December 2025 Line 29: Line 29:  * [[Forums team]]: Florian Hubold (doktor5000), Karel Roth (isadora), Pascal Vilarem (Maât * [[Forums team]]: Florian Hubold (doktor5000), Karel Roth (isadora), Pascal Vilarem (Maât  * [[Internationalisation_Team_(i18n)|I18n]]: Yuri Chornoivan (yurchor), Filip Komar (filip) * [[Internationalisation_Team_(i18n)|I18n]]: Yuri Chornoivan (yurchor), Filip Komar (filip) −* [[Packagers]]: Nicolas Lécureuil (neoclust)  +* [[Packagers]]: Nicolas Lécureuil (neoclust) (± first half of 2025), Bruno Cornec (bcornec) (since autumn 2025)  * [[QA_Team|QA]]: Thomas J Andrews (TJ), Jose López (joselp) * [[QA_Team|QA]]: Thomas J Andrews (TJ), Jose López (joselp)  * [[Packages_Security_Team|Security Team]]: David Walser (luigiwalser), Nicolas Salguero (ns80) * [[Packages_Security_Team|Security Team]]: David Walser (luigiwalser), Nicolas Salguero (ns80) Marja

← Older revision Revision as of 23:58, 6 December 2025 Line 213: Line 213:  == Software == == Software ==  === Chromium Browser === === Chromium Browser === −Wir haben zur Zeit keinen Paketbetreuer um den Chromium Browser aktuell zu halten, {{Bug|33609}}. Workaround: Installieren Sie app/org.chromium.Chromium/x86_64/stable als [[Flatpak-de|Flatpak]], oder den Chrome Browser. Alternativ kann auch Chrome als rpm von Google installiert werden. Aktualisierung Januar 2025: zur Zeit ist Chromium auf dem aktuellen Stand.+Wir haben zur Zeit keinen Paketbetreuer um den Chromium Browser aktuell zu halten, {{Bug|34394}}. Workaround: Installieren Sie app/org.chromium.Chromium/x86_64/stable als [[Flatpak-de|Flatpak]], oder den Chrome Browser. Alternativ kann auch Chrome als rpm von Google installiert werden.     === Firefox ESR === === Firefox ESR === Psyca

‎Chromium browser

← Older revision Revision as of 21:04, 6 December 2025 Line 174: Line 174:     === Chromium browser === === Chromium browser === −We not have a maintainer for this software, consider use flatpak+We do not have a maintainer for this software. Workarounds: As [[Flatpak|Flatpak]] install app/org.chromium.Chromium/x86_64/stable, or Chrome. Or use Chrome rpm from Google.     === Firefox ESR === === Firefox ESR === Morgano

‎Chromium browser: update

← Older revision Revision as of 21:03, 6 December 2025 Line 278: Line 278:  === Chromium browser === === Chromium browser ===    −We seem not to have packagers for keeping Chromium browser updated, {{Bug|33609}}. Workarounds: As [[Flatpak|Flatpak]] install app/org.chromium.Chromium/x86_64/stable, or Chrome. Or Chrome rpm from Google. Update January 2025: currently it is updated.+We seem not to have packagers for keeping Chromium browser updated, {{Bug|34394}}. Workarounds: As [[Flatpak|Flatpak]] install app/org.chromium.Chromium/x86_64/stable, or Chrome. Or Chrome rpm from Google.     === Firefox ESR === === Firefox ESR === Morgano

Marc Paré has added himself to the iso tester list.

← Older revision Revision as of 20:58, 6 December 2025 Line 122: Line 122:     * katmatek - José Alberto - j.alberto.vc at gmail dot com * katmatek - José Alberto - j.alberto.vc at gmail dot com  +  +* marcpare - Marc Paré - marc.pare at parentreprise dot com Marcpare