Lector de Feeds

Publication date: 27 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-5222 Description A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. References

• https://bugs.mageia.org/show_bug.cgi?id=34442
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KB5WTHV4QSRRUVG6KMSV4Z2FIQKSWR54/
• https://lists.debian.org/debian-security-announce/2025/msg00115.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5222

SRPMS 9/core

• icu-73.2-1.2.mga9

Publication date: 27 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-49133 Description It was discovered that libtpms had a potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133). References

• https://bugs.mageia.org/show_bug.cgi?id=34396
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XITIPFJQFQIYBAV5Y3UA5AL6T5ATFDFX/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49133

SRPMS 9/core

• libtpms-0.9.6-1.1.mga9

added a link in line 15, that Morgano inserted.

← Older revision Revision as of 12:59, 26 October 2025 Line 19: Line 19:  Eén specifiek veeleisende taak is het beheer van het Mageia-systeem van programma-pakketten afhandelt. Dit is daarom een van de tests die we uitvoeren. De lees- en schrijfsnelheden bij het installeren of verwijderen van programma-pakketten kan ruim een factor tien variëren tussen opslag-apparaten die op de markt worden gebracht met dezelfde aanhoudende schrijfsnelheid! Eén specifiek veeleisende taak is het beheer van het Mageia-systeem van programma-pakketten afhandelt. Dit is daarom een van de tests die we uitvoeren. De lees- en schrijfsnelheden bij het installeren of verwijderen van programma-pakketten kan ruim een factor tien variëren tussen opslag-apparaten die op de markt worden gebracht met dezelfde aanhoudende schrijfsnelheid!    −Het is moeilijk om op internet gegevens te vinden over snelheden voor het schrijven van veel kleine bestanden. Eén bron is https://usb.userbenchmark.com/, gesorteerd op kolom "Peak 4k W". In test "A" hieronder voor het verwijderen van pakketten, bleek het verschil in snelheid zelfs groter dan het verschil in die snelheidscores, waarschijnlijk omdat in test "A" veel kleinere datapakketjes werden geschreven.+Het is moeilijk om op internet gegevens te vinden over snelheden voor het schrijven van veel kleine bestanden. Eén bron is https://usb.userbenchmark.com/, gesorteerd op kolom "Peak 4k W". In onze test "A" hieronder, voor het verwijderen van pakketten, bleek het verschil in snelheid zelfs groter dan het verschil in die snelheidscores, waarschijnlijk omdat in test "A" veel kleinere datapakketjes werden geschreven.  +Hier vindt u een website die vele usb-sticks test, maar niet speciaal met kleine schrijfacties:  +https://ssd-tester.com/usb_flash_drive_test.php     == Discrepanties == == Discrepanties == Marchugo

‎Backport kernels: word, version

← Older revision Revision as of 22:36, 25 October 2025 Line 76: Line 76:  kernel-stable-desktop-6.12... <br> kernel-stable-desktop-6.12... <br>  kernel-stable-desktop-devel-6.12... ''(If you need it, i.e if your other kernels also have corresponding -devel- packages installed.)'' <br> kernel-stable-desktop-devel-6.12... ''(If you need it, i.e if your other kernels also have corresponding -devel- packages installed.)'' <br> −- Also note you need the suggested relevant -latest packages too for easy future updating. (In contrast to mga9 6.6 kernels that do not ''need'' them, due to a different naming scheme.)+- Also note you need the suggested corresponding -latest packages too for easy future updating. (In contrast to mga9 6.6 kernels that do not ''need'' them, due to a different naming scheme.)     '''Keep having latest non-backport''' lib64bpf1, cpupower, kernel-userspace-headers installed, and keep them updated.  ''- we do not backport lib64bpf1 and cpupower, to not break compatibility with non-backport kernels.'' '''Keep having latest non-backport''' lib64bpf1, cpupower, kernel-userspace-headers installed, and keep them updated.  ''- we do not backport lib64bpf1 and cpupower, to not break compatibility with non-backport kernels.''    −'''Regarding kernel-stable-userspace-headers''' contra ''kernel-userspace-headers for 6.6 kernels:'' The packages are used for building applications; use the one for the current kernel you build for. They conflict each other and are handled correctly by urpmi & drakrpm - when you have '''updated mageia-repos and meta-task packages''' to 9.4 versions (at time of writing found in updates_testing) - and using kernel versions 6.6.104+ and 6.12.44+.+'''Regarding kernel-stable-userspace-headers''' contra ''kernel-userspace-headers for 6.6 kernels:'' The packages are used for building applications; use the one for the current kernel you build for. They conflict each other and are handled correctly by urpmi & drakrpm - when you have '''updated mageia-repos and meta-task packages''' to 9.4 versions (at time of writing found in updates_testing) - and using kernel versions 6.6.105+ and 6.12.44+.     '''Remove-Old-Kernels''', {{prog|rok}}, do currently not see nor handle 6.12 kernels, so you need to manually uninstall excess kernels when needed to save space - like you did for any kernels before rok was introduced with Mageia 9.  Or, '''make it work''' by adding to {{file|/etc/remove-old-kernels.cfg}}: In the list under the line "LISTK=\", add <br> kernel-stable-desktop <br> kernel-stable-desktop-devel <br> kernel-stable-source '''Remove-Old-Kernels''', {{prog|rok}}, do currently not see nor handle 6.12 kernels, so you need to manually uninstall excess kernels when needed to save space - like you did for any kernels before rok was introduced with Mageia 9.  Or, '''make it work''' by adding to {{file|/etc/remove-old-kernels.cfg}}: In the list under the line "LISTK=\", add <br> kernel-stable-desktop <br> kernel-stable-desktop-devel <br> kernel-stable-source Morgano

‎Reply to Yuusha: move signature up

← Older revision Revision as of 18:48, 25 October 2025 (One intermediate revision by the same user not shown)Line 52: Line 52:     I have deleted all dead links and vendors which doesn't sell Mageia or Mageia related product any more. The page is now a draft. The council + board edit only is no more relevant, but I let it for now. This page needs improvement and a rewrite. I have deleted all dead links and vendors which doesn't sell Mageia or Mageia related product any more. The page is now a draft. The council + board edit only is no more relevant, but I let it for now. This page needs improvement and a rewrite.  +  +=== Reply to Yuusha ===  +--[[User:Marja|marja]] ([[User talk:Marja|talk]]) 18:48, 25 October 2025 (UTC)  +Hi Yuusha,  +  +Thanks for your work to clean this page up, especially the dead links.  +  +Did you contact the vendors which don't seem to sell Mageia or Mageia related products anymore, to make sure they really don't? Marja

‎Mission: added a link to test site

← Older revision Revision as of 17:44, 25 October 2025 Line 15: Line 15:  This usage is different from what is normal use if such devices, and they may differ vastly in performance despite being marketed to similar speeds.  The reason is that an operating system frequently reads and writes many small chunks, which is very different from storing pictures, videos or other large files. One specifically demanding task is when the system is handling packages, so that is one of the tests we perform.  This value can vary more than ten times between devices that are marketed to the same sustained write speed! This usage is different from what is normal use if such devices, and they may differ vastly in performance despite being marketed to similar speeds.  The reason is that an operating system frequently reads and writes many small chunks, which is very different from storing pictures, videos or other large files. One specifically demanding task is when the system is handling packages, so that is one of the tests we perform.  This value can vary more than ten times between devices that are marketed to the same sustained write speed!    −It is hard to find speed numbers for writing many small files. One source is https://usb.userbenchmark.com/ sort by column "Peak 4k W". In the test "A" below for package removal the difference was even greater than the difference in that number, probably because writes was much smaller in test "A".+It is hard to find speed numbers for writing many small files. One source is https://usb.userbenchmark.com/ sort by column "Peak 4k W".  +   +In our test "A" below for package removal the difference was even greater than the difference in that number, probably because writes was much smaller in test "A".  +   +Here is a site that test many USB sticks, but not specifically small writes: https://ssd-tester.com/usb_flash_drive_test.php     == Discrepancies == == Discrepancies == Morgano