Lector de Feeds

Publication date: 21 Apr 2026
Type: bugfix
Affected Mageia releases : 9
Description mga-dorsync is QA tool to sync Mageia ISO images and transfer them to a USB stick. Now, after some updates in the code and bugs fixed, we are providing a official package for this tool. References

• https://bugs.mageia.org/show_bug.cgi?id=34826

SRPMS 9/core

• mga-dorsync-3.3-1.mga9

Publication date: 21 Apr 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-5731 , CVE-2026-5732 , CVE-2026-5734 Description Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2. (CVE-2026-5731) Incorrect boundary conditions, integer overflow in the Graphics: Text component. (CVE-2026-5732) Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2. (CVE-2026-5734) References

• https://bugs.mageia.org/show_bug.cgi?id=35338
• https://www.firefox.com/en-US/firefox/140.9.1/releasenotes/
• https://www.thunderbird.net/en-US/thunderbird/140.9.1esr/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-27/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-29/
• https://www.cve.org/CVERecord?id=CVE-2026-5731
• https://www.cve.org/CVERecord?id=CVE-2026-5732
• https://www.cve.org/CVERecord?id=CVE-2026-5734

SRPMS 9/core

• firefox-140.9.1-1.mga9
• firefox-l10n-140.9.1-1.mga9
• thunderbird-140.9.1-1.mga9
• thunderbird-l10n-140.9.1-1.mga9

Publication date: 21 Apr 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-61143 , CVE-2025-61144 Description libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c. (CVE-2025-61143) libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. (CVE-2025-61144) References

• https://bugs.mageia.org/show_bug.cgi?id=35268
• https://ubuntu.com/security/notices/USN-8113-1
• https://www.cve.org/CVERecord?id=CVE-2025-61143
• https://www.cve.org/CVERecord?id=CVE-2025-61144

SRPMS 9/core

• libtiff-4.5.1-1.7.mga9