Lector de Feeds

Publication date: 27 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-5222 Description A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. References

• https://bugs.mageia.org/show_bug.cgi?id=34442
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KB5WTHV4QSRRUVG6KMSV4Z2FIQKSWR54/
• https://lists.debian.org/debian-security-announce/2025/msg00115.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5222

SRPMS 9/core

• icu-73.2-1.2.mga9

Publication date: 27 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-49133 Description It was discovered that libtpms had a potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133). References

• https://bugs.mageia.org/show_bug.cgi?id=34396
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XITIPFJQFQIYBAV5Y3UA5AL6T5ATFDFX/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49133

SRPMS 9/core

• libtpms-0.9.6-1.1.mga9