Lector de Feeds

Publication date: 31 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-53603 Description It was discovered that sope, the set of Objective-C frameworks powering SOGo, contains a DoS bug which could cause a crash (CVE-2025-53603). References

• https://bugs.mageia.org/show_bug.cgi?id=34416
• https://www.openwall.com/lists/oss-security/2025/07/02/3
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53603

SRPMS 9/core

• sope-5.6.0-2.1.mga9

Publication date: 31 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-8677 , CVE-2025-40778 , CVE-2025-40780 Description Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677). Cache poisoning attacks with unsolicited RRs (CVE-2025-40778). Cache poisoning due to weak PRNG (CVE-2025-40780). References

• https://bugs.mageia.org/show_bug.cgi?id=34696
• https://www.openwall.com/lists/oss-security/2025/10/22/1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8677
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40778
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40780

SRPMS 9/core

• bind-9.18.39-1.1.mga9

Publication date: 31 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-46397 , CVE-2025-46398 , CVE-2025-46399 , CVE-2025-46400 Description fig2dev stack-overflow. (CVE-2025-46397) fig2dev stack-overflow via read_objects. (CVE-2025-46398) fig2dev segmentation fault vulnerability. (CVE-2025-46399) fig2dev segmentation fault in read_arcobject. (CVE-2025-46400) References

• https://bugs.mageia.org/show_bug.cgi?id=34309
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZDNSWLCQENGSN2O2GVDL64VL52AR7HAU/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46397
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46398
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46399
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46400

SRPMS 9/core

• transfig-3.2.9a-1.1.mga9

Publication date: 31 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-13978 , CVE-2025-8176 , CVE-2025-8177 , CVE-2025-8534 , CVE-2025-8961 , CVE-2025-9165 , CVE-2025-9900 Description LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference. (CVE-2024-13978) LibTIFF tiffmedian.c get_histogram use after free. (CVE-2025-8176) LibTIFF thumbnail.c setrow buffer overflow. (CVE-2025-8177) libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference. (CVE-2025-8534) LibTIFF tiffcrop tiffcrop.c main memory corruption. (CVE-2025-8961) LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak. (CVE-2025-9165) Libtiff: libtiff write-what-where. (CVE-2025-9900) References

• https://bugs.mageia.org/show_bug.cgi?id=34704
• https://lists.debian.org/debian-security-announce/2025/msg00189.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13978
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8177
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8534
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8961
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9165
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900

SRPMS 9/core

• libtiff-4.5.1-1.6.mga9