Lector de Feeds

Publication date: 10 Jan 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-11961 Description OOBR and OOBW in pcap_ether_aton() in libpcap. (CVE-2025-11961) References

• https://bugs.mageia.org/show_bug.cgi?id=34939
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2026&m=slackware-security.355202
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11961

SRPMS 9/core

• libpcap-1.10.6-1.mga9

Publication date: 10 Jan 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-69277 Description Libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. (CVE-2025-69277) References

• https://bugs.mageia.org/show_bug.cgi?id=34940
• https://lists.debian.org/debian-security-announce/2026/msg00002.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69277

SRPMS 9/core

• sodium-1.0.18-3.1.mga9

Publication date: 10 Jan 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-13034 , CVE-2025-14017 , CVE-2025-14524 , CVE-2025-14819 , CVE-2025-15079 , CVE-2025-15224 Description curl is susceptible to a number of low severity security vulnerabilities: CVE-2025-14524: bearer token leak on cross-protocol redirect CVE-2025-14819: OpenSSL partial chain store policy bypass CVE-2025-15079: libssh knownhosts file vulnerability CVE-2025-15224: libssh key passphrase bypass vulnerability This release fixes these issues. References

• https://bugs.mageia.org/show_bug.cgi?id=34944
• https://curl.se/docs/vuln-7.88.1.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13034
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14017
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14524
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14819
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15079
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15224

SRPMS 9/core

• curl-7.88.1-4.9.mga9

Publication date: 10 Jan 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-69194 Description Arbitrary File Write via Metalink Path Traversal in GNU Wget2. (CVE-2025-69194) References

• https://bugs.mageia.org/show_bug.cgi?id=34947
• https://www.openwall.com/lists/oss-security/2026/01/07/1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69194

SRPMS 9/core

• wget2-2.0.1-1.1.mga9

← Older revision Revision as of 22:50, 9 January 2026 Line 69: Line 69:  Kernel 6.12.60+ und 6.18.3+ befinden sich in den Backport Repositorien für alle Architekturen '''als Desktop Variante und 6.18 auch als Server Variante''' ''- ansonsten keine weitere Varianten.''<br> Kernel 6.12.60+ und 6.18.3+ befinden sich in den Backport Repositorien für alle Architekturen '''als Desktop Variante und 6.18 auch als Server Variante''' ''- ansonsten keine weitere Varianten.''<br>    −''('''In Bearbeitung''' {{Bug|34545}} Januar 2026; Kernel befinden sich aktuell im backport_testing Repositorium)''<br>+''('''In Bearbeitung''' {{Bug|34962}} Januar 2026; Kernel befinden sich aktuell im backport_testing Repositorium)''<br>  '''<br> '''<br>  Es werden nur zwei Pakete pro Kernel installiert''' (aus Backport): <br> Es werden nur zwei Pakete pro Kernel installiert''' (aus Backport): <br> Psyca

‎Backport kernels: bug number updated

← Older revision Revision as of 21:51, 9 January 2026 Line 73: Line 73:     Kernel 6.12.60+ and 6.18.3+ are provided in Backport repository for all architectures '''in desktop flavour, and for 6.18 also in server flavour''' ''- no other flavour.''<br> Kernel 6.12.60+ and 6.18.3+ are provided in Backport repository for all architectures '''in desktop flavour, and for 6.18 also in server flavour''' ''- no other flavour.''<br> −''('''In progress''' {{Bug|34545}} January 2026; kernels are currently in backport_testing repo)''<br>+''('''In progress''' {{Bug|34962}} January 2026; kernels are currently in backport_testing repo)''<br>  '''<br> '''<br>  Only two packages to install per kernel''' (from Backport): <br> Only two packages to install per kernel''' (from Backport): <br> Morgano

← Older revision Revision as of 18:18, 9 January 2026 (2 intermediate revisions by the same user not shown)Line 175: Line 175:  #* ''If there are problems during adding media or updating, remedies for [[Mageia_9_Errata#Downloading_software|Mageia 9]], [[Mageia_10_Errata#Downloading_software|Mageia 10]]'' #* ''If there are problems during adding media or updating, remedies for [[Mageia_9_Errata#Downloading_software|Mageia 9]], [[Mageia_10_Errata#Downloading_software|Mageia 10]]''  # Update: {{cmd|urpmi --auto-up --auto}}  ''This may execute in two passes: one short to update core parts like gcc and rpm if available, then restart and do a long pass.  Note that especially for the long pass it may initially look like nothing happens for a couple minutes.'' # Update: {{cmd|urpmi --auto-up --auto}}  ''This may execute in two passes: one short to update core parts like gcc and rpm if available, then restart and do a long pass.  Note that especially for the long pass it may initially look like nothing happens for a couple minutes.'' −# ''For Mageia 7.1 only:'' run again {{cmd|remove-unused-packages}} as the updated version rinse more.   # If you are non-English but like to have English locale too, re-add it: {{cmd|urpmi locales-en autocorr-en hunspell-en hyphen-en mythes-en}} # If you are non-English but like to have English locale too, re-add it: {{cmd|urpmi locales-en autocorr-en hunspell-en hyphen-en mythes-en}} −# If you use Mageia 7 32 bit, read [[#Updated_Mageia_7_32_bit_live_fail_booting|Updated Mageia 7 32 bit Live fail booting]]. You can right now before rebooting [[#Fix_Mageia_7_32_bit_update_boot_problem|Fix Mageia 7 32 bit update boot problem]].   # Reboot. If the menu option to reboot do not work, issue in a terminal: {{cmd|reboot}}. # Reboot. If the menu option to reboot do not work, issue in a terminal: {{cmd|reboot}}.    Line 184: Line 182:     '''(*) Example of specifying packages to not update'''<br> '''(*) Example of specifying packages to not update'''<br> −To edit the list execute as root {{cmd|nano /etc/urpmi/skip.list}}, and for example to block desktop kernel 6.6 series from updating (For Mageia 9 and you encrypt persistence or you manually choose to install 6.18 from backport): add at end of the list "/^kernel-desktop-6.6./" without quotation marks as a line by itself. (And in this case for kernel only: uninstall the kernel-desktop-latest* package.)+To edit the list execute as root {{cmd|nano /etc/urpmi/skip.list}}, and for example to block desktop kernel 6.6 series from updating (For Mageia 9 and you encrypt persistence or you manually choose to install 6.18 from backport): add at end of the list "/^kernel-desktop-6.6./" <!-- somehow this also restricts 6.4 and 6.5 kernels --> without quotation marks as a line by itself. (And in this case for kernel only: uninstall the kernel-desktop-latest* package.)     '''(**) Keep the two default Live repos that are built into the ISO.'''<br> '''(**) Keep the two default Live repos that are built into the ISO.'''<br> −They contain the necessary packages for the installer to install bootloader, and proprietary drivers including the -devel- package for the default kernel. You can list their content using {{cmd|urpmq --list --media 'Live'}}. They are good to keep in case you need drivers to get connected. "Removing" what is in ISO stored repo does not free any space anyway.  The repos are named "Live Core" and "Live Nonfree". If you removed them, set them up again as local repos using /var/local/mga_rpms/core and /var/local/mga_rpms/nonfree respectively.''+They contain the necessary packages for the installer to install bootloader, and proprietary drivers including the -devel- package for the default kernel. You can list their content using {{cmd|urpmq --list -r --media 'Live'}}. They are good to keep in case you need drivers to get connected. "Removing" what is in ISO stored repo does not free any space anyway.  The repos are named "Live Core" and "Live Nonfree". If you removed them, set them up again as local repos using /var/local/mga_rpms/core and /var/local/mga_rpms/nonfree respectively.''  +   +=== Backport kernel ===  +For Mageia 9 we provide kernel series 6.18 in backport. To utilise this in Live:  +# Follow ''Recipe for updated Live'' above but do not yet block kernel updates - so you will get accessory files (i.e cpupower) for at least kernel 6.6.105 and other needed updates.  +# Reboot to this 6.6.105+ kernel.  +# Read and follow how to install [[Kernel_flavours#Backport_kernels|backport kernel]].  +# Reboot to that kernel.  +# Add 6.6 kernel in skip.list per '''(*)''' above, and uninstall kernel(s) 6.6.x, which should also remove any 6.6.*-latest package.     == Custom Live ISO == == Custom Live ISO == Line 501: Line 507:  Symptom for Mageia 8 Live if persistence use that option: the kernel select "[F1]" menu option is not available, {{Bug|32006}}. ''(Somehow rest of persistence operation seem to work, but better not use.) '''Workaround:''' Boot without persistence, and [[#Removing_or_recreating_persistence_on_itself|add (or reformat) persistence partition when running the Live]] itself. Symptom for Mageia 8 Live if persistence use that option: the kernel select "[F1]" menu option is not available, {{Bug|32006}}. ''(Somehow rest of persistence operation seem to work, but better not use.) '''Workaround:''' Boot without persistence, and [[#Removing_or_recreating_persistence_on_itself|add (or reformat) persistence partition when running the Live]] itself.    −Also note Mageia 8 and earlier can not fsck such partitions. {{Bug|31641}}, and currently neither Mageia 8 nor 9 fsarchiver works to back it up, see fsarchiver under [[Mageia_9_Errata#Various_software]].+Also note Mageia 8 and earlier can not fsck such partitions. {{Bug|31641}}, and neither Mageia 8 nor 9 fsarchiver works to back it up, see fsarchiver under [[Mageia_9_Errata#Various_software]].     === Hibernate Suspend Resume === === Hibernate Suspend Resume ===    −* For Mageia 8: [[Mageia_8_Errata#Hibernation|hibernation bug]]  (not verified if valid Mageia 9)+* For Mageia 8: [[Mageia_8_Errata#Hibernation|hibernation bug]]  (not verified if valid Mageia 9 & 10)     === Reformatting (reusing) a Live system === === Reformatting (reusing) a Live system === Line 582: Line 588:     '''Tests to do''' '''Tests to do''' −  −* Verify procedures on Mageia 9 & 10      * Can it create swap on itself, so fstab get updated? * Can it create swap on itself, so fstab get updated?    −* Mageia 7 see and can partition some Live, some other Live do not even display as tab. (while dolphin can use partitions) - Bug?+* Still valid mga9 & 10?:  Mga8RC diskdrake see the base system on 32 bit ISO as "Hidden HPFS/NTFS", while for 64 bit ISOs it displays it is iso9660, and displays the name of the ISO on the partition.   −   −* Mga8RC diskdrake see the base system on 32 bit ISO as "Hidden HPFS/NTFS", while for 64 bit ISOs it displays it is iso9660, and displays the name of the ISO on the partition.        '''Swap file, improve:''' '''Swap file, improve:''' Line 597: Line 599:  * Test SD card slot in Laptops that have such - can it boot there (BIOS issue) or do it need USB adapter? * Test SD card slot in Laptops that have such - can it boot there (BIOS issue) or do it need USB adapter?  * Align persistent partition and other partition(s) to erase blocks!  Stripe, alignment, Ext2: use 4 instead w journal turned off, http://blog.mcnalu.net/faster-usb-sticks.html, Erase block: https://forums.linuxmint.com/viewtopic.php?t=275082  https://en.wikipedia.org/wiki/Flash_memory * Align persistent partition and other partition(s) to erase blocks!  Stripe, alignment, Ext2: use 4 instead w journal turned off, http://blog.mcnalu.net/faster-usb-sticks.html, Erase block: https://forums.linuxmint.com/viewtopic.php?t=275082  https://en.wikipedia.org/wiki/Flash_memory −* KDE partitionmanager support ExFAT ? mga7 updated, Mga 8.  Other file systems?+* KDE partitionmanager support ExFAT ?  ** Do IsoDumper align partition to *erase* blocks?  Improve: assume worst (big blocks?) ** Do IsoDumper align partition to *erase* blocks?  Improve: assume worst (big blocks?)    Line 610: Line 612:  ''(Plus a lot not documented...)'' ''(Plus a lot not documented...)''    −'''Mga 10 alpha'''+'''Mga 10 alpha1'''  * Update to 6.18 kernel (6.12 is original) * Update to 6.18 kernel (6.12 is original)    −'''Mga 9 final'''+'''Mga 9'''  * Various use * Various use  +* Backport kernel 6.18.3-2     '''Mga8 final''' '''Mga8 final''' Morgano