Lector de Feeds

Publication date: 29 Oct 2024
Type: security
Affected Mageia releases : 9
Description Integer overflow in Layout. (CVE-2024-7025) Insufficient data validation in Mojo. (CVE-2024-9369) Inappropriate implementation in V8. (CVE-2024-9370) Type Confusion in V8. (CVE-2024-9602) Type Confusion in V8. (CVE-2024-9603) References

• https://bugs.mageia.org/show_bug.cgi?id=33688
• https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop.html
• https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_8.html

SRPMS 9/tainted

• chromium-browser-stable-128.0.6613.137-2.mga9.tainted

Publication date: 29 Oct 2024
Type: bugfix
Affected Mageia releases : 9
Description Installing python3-pandas pulls matplotlib, which requires python-qt5 and texlive, which is more than 1 Gb. However, this dependency is not in the python package; it is added only in our spec. References

• https://bugs.mageia.org/show_bug.cgi?id=33689

SRPMS 9/core

• python-pandas-1.4.1-2.1.mga9

Publication date: 29 Oct 2024
Type: bugfix
Affected Mageia releases : 9
Description This update fixes a bunch of segmentation faults and assertion errors. For details see the linked reference. References

• https://bugs.mageia.org/show_bug.cgi?id=33683
• https://www.php.net/ChangeLog-8.php#8.2.25

SRPMS 9/core

• php-8.2.25-1.mga9

Add location field

← Older revision Revision as of 15:13, 28 October 2024 (6 intermediate revisions by the same user not shown)Line 17: Line 17:  {| class="wikitable" style="margin:auto" {| class="wikitable" style="margin:auto"  |+ Mirror sites |+ Mirror sites −! Mirror address !! Short name !! Contact !! E-mail address || Additional info+! Mirror address !! Short name !! Location !! Contact !! E-mail address || Additional info  |- |- −| https://distro.ibiblio.org/mageia/ || Ibiblio || Don Sizemore || dls [AT] ibiblio [DOT] org || 1st tier mirror+| [https://mirror.accum.se/mirror/mageia/ https://mirror.accum.se/] || ACC || Umeå || ftp-adm || ftp-adm [AT] accum [DOT] se || 1st tier mirror  |- |- −| https://mirror.math.princeton.edu/|| Princeton || Benjamin Rose || benrose [AT] math [DOT] princeton [DOT] edu || 1st tier mirror+| [https://distro.ibiblio.org/mageia/ https://distro.ibiblio.org/] || Ibiblio || || Don Sizemore || dls [AT] ibiblio [DOT] org || 1st tier mirror  |- |- −| https://ftp.snt.utwente.nl/ || Twente || ftpcom || ftpcom [AT] snt [DOT] utwente [DOT] nl ||+| [http://ftp.nluug.nl/pub/os/Linux/distr/mageia/ https://ftp.nluug.nl/]|| NLUUG || Groningen || ftp-admin || ftp-admin [AT] nluug [DOT] nl ||  +|-  +| [https://mirror.math.princeton.edu/pub/mageia/ https://mirror.math.princeton.edu/]|| Princeton || Princeton || Benjamin Rose || benrose [AT] math [DOT] princeton [DOT] edu || 1st tier mirror  +|-  +| [https://ftp.snt.utwente.nl/pub/os/linux/mageia/ https://ftp.snt.utwente.nl/] || Twente || Twente ||ftpcom || ftpcom [AT] snt [DOT] utwente [DOT] nl ||  |} |} Marja

Title

← Older revision Revision as of 11:46, 28 October 2024 (One intermediate revision by the same user not shown)Line 29: Line 29:     == Installation == == Installation == −=== Script method ===+=== Mageia tool ===     ''' ''####  This is the recommended method.  ####'' ''' ''' ''####  This is the recommended method.  ####'' ''' Line 35: Line 35:  ''( Mageia 9 )'' ''( Mageia 9 )''    −To correctly switch between PulseAudio and PipeWire ''in both directions'' you may use the pa-switcher utility available [https://bugs.mageia.org/attachment.cgi?id=13717 as package download] from {{bug|31507}}.+To correctly switch between PulseAudio and PipeWire ''in both directions'' use ''draksound''.     Note: Jackaudio is optional, not required. Note: Jackaudio is optional, not required. Papoteur

continue to adjust the page for MirrorManager2

← Older revision Revision as of 09:36, 28 October 2024 Line 30: Line 30:  = Detailed Description = = Detailed Description =  Per the [https://github.com/fedora-infra/mirrormanager2 MirrorManager2] website:   Per the [https://github.com/fedora-infra/mirrormanager2 MirrorManager2] website:   −  MirrorManager2 is a rewrite of mirrormanager using flask and SQLAlchemy.+ MirrorManager2 is a rewrite of mirrormanager using flask and SQLAlchemy.            −  MirrorManager is the application that keeps track of the nearly 400 public mirrors,+ MirrorManager is the application that keeps track of the nearly 400 public mirrors, and over 300 private mirrors, that carry Fedora, EPEL, and RHEL content, and is used by rpmfusion.org, a third party repository. It automatically selects the "best" mirror for a given user based on a set of fallback heuristics. −  and over 300 private mirrors, that carry Fedora, EPEL, and RHEL content, and is used  −  by rpmfusion.org, a third party repository. It automatically selects the "best"  −  mirror for a given user based on a set of fallback heuristics.     −  The complete MirrorManager functionality requires generate-mirrorlist-cache and+ The complete MirrorManager functionality requires generate-mirrorlist-cache and mirrorlist-server which can be found at https://github.com/adrianreber/mirrorlist-server. −  mirrorlist-server which can be found at https://github.com/adrianreber/mirrorlist-server.     −This change involves migrating every end point where mirror selection occurs to being managed by MirrorBrain in some fashion (web downloads, the installer, urpmi, PackageKit/DNF) to massively improve the reliability of mirror selection and availability of Mageia content.+This change involves migrating every end point where mirror selection occurs to being managed by MirrorManager2 in some fashion (web downloads, the installer, urpmi, PackageKit/DNF) to massively improve the reliability of mirror selection and availability of Mageia content.     = Why it would be good for Mageia to use it = = Why it would be good for Mageia to use it = Line 47: Line 43:  It's exponentially worse for Cauldron users, where it's a hit-or-miss affair (mostly misses) to get up to date Cauldron content, especially for users in the Americas and Asia, where we have fewer mirrors in general. It's exponentially worse for Cauldron users, where it's a hit-or-miss affair (mostly misses) to get up to date Cauldron content, especially for users in the Americas and Asia, where we have fewer mirrors in general.    −MirrorBrain improves this experience by tracking mirrors and automatically filtering the list based on content availability, preventing users from seeing bad mirrors on a regular basis. In addition, the content redirector portion automatically determines a good, up to date mirror to use based on a number of factors about your connection, which ensures that you get a good experience for downloading content directly (through web browsers or through urpmi).+MirrorManager2 improves this experience by tracking mirrors and automatically filtering the list based on content availability, preventing users from seeing bad mirrors on a regular basis. In addition, the content redirector portion automatically determines a good, up to date mirror to use based on a number of factors about your connection, which ensures that you get a good experience for downloading content directly (through web browsers or through urpmi).     = Test case = = Test case = −* Adding urpmi distrib media should give you MirrorBrain redirector+* Adding urpmi distrib media should give you MirrorManager2 redirector −* The existing yum-style mirrorlist endpoint should work as-is with MirrorBrain+* The existing yum-style mirrorlist endpoint should work as-is with MirrorManager2  * The new metalink endpoint for rpm-md repos should work with PackageKit/DNF. * The new metalink endpoint for rpm-md repos should work with PackageKit/DNF.     = Tasks = = Tasks = −* Deploy and activate MirrorBrain+* Deploy and activate MirrorManager2 −* Migrate the mirror database from Mirmon to MirrorBrain+* Migrate the mirror database from Mirmon to MirrorManager2 −* Migrate the Yum style mirrorlist endpoint to MirrorBrain managed mirrorlist+* Migrate the Yum style mirrorlist endpoint to MirrorManager2 managed mirrorlist −* Migrate the urpmi distrib data to the MirrorBrain redirector URL (download.mageia.org or something similar)+* Migrate the urpmi distrib data to the MirrorManager2 redirector URL (download.mageia.org or something similar)        = Software / Packages Dependencies = = Software / Packages Dependencies = −* MirrorBrain+* Needing to be packaged: −** MirrorBrain has been in Mageia for a while now, and is part of the standard repositories in Mageia 5 (which our infrastructure currently runs on)+** MirrorManager2 − +** generate-mirrorlist-cache  +** mirrorlist-server  = What could disrupt development of this new feature = = What could disrupt development of this new feature = −If the MirrorBrain deployment cannot be completed and mirror selector endpoints migrated, then this feature cannot be fully implemented.+If the MirrorManager2 deployment cannot be completed and mirror selector endpoints migrated, then this feature cannot be fully implemented.     = Planning = = Planning = −Early inclusion into Mageia 8 would allow for good appropriation of administrator resources to roll this out and make sure everything works.+Early inclusion into Mageia 10 would allow for good appropriation of administrator resources to roll this out and make sure everything works.     = Contingency = = Contingency = −If this fails to be ready for Mageia 8, then we fall back to our current infrastructure.+If this fails to be ready for Mageia 10, then we fall back to our current infrastructure.     = Release Notes = = Release Notes = −The release notes should indicate that Mageia now offers enhanced automatic mirror selection powered by MirrorBrain.+The release notes should indicate that Mageia now offers enhanced automatic mirror selection powered by MirrorManager2.     = Documentation = = Documentation = −* [http://mirrorbrain.org/ MirrorBrain website]+* [https://github.com/fedora-infra/mirrormanager2 MirrorManager2 website]     = Associated Bugs = = Associated Bugs = Marja

Start working on this page

New page

[[Category: ProposedFeatureMageia10]]

{{Note|This feature has been cloned from [[Feature:Migrate to MirrorBrain]] and then adjusted for [https://github.com/fedora-infra/mirrormanager2 MirrorManager2], a maintained MirrorBrain alternative ([https://mirrorbrain.org/ MirrorBrain] looks dead)}}


= Summary =

Migrate mirror management to [MirrorManager2 (after adjusting it for Mageia) and start generating metalinks for DNF to use for intelligent mirror selection.

= Owner =

The owner of [[Feature:Migrate to MirrorBrain]] was:
* '''Name''': Neal Gompa
* '''Email''': ngompa13@gmail.com

= Resources =

This will require efforts by the Mageia sysadmins to migrate our mirror database into MirrorManager2 and convert the existing Yum-style mirrorlist endpoint to a MirrorManager2 managed one, as well as introduce a new endpoint for getting the metalink for DNF and PackageKit.

The urpmi and installer developers will need to change the configuration of urpmi to use the MirrorManager2-managed auto-redirector URL, and the packager of mageia-repos will need to change the repo files to use the metalink for DNF and PackageKit to use.

The web team and the sysadmin team will need to migrate the web downloads for ISOs to MirrorManager2 as well.

= Current status =

* '''Targeted release''': Mageia 10
* '''Last updated''': {{REVISIONYEAR}}/{{REVISIONMONTH}}/{{REVISIONDAY2}}
* '''Percentage of completion''': 0%

= Detailed Description =
Per the [https://github.com/fedora-infra/mirrormanager2 MirrorManager2] website:
MirrorManager2 is a rewrite of mirrormanager using flask and SQLAlchemy.

MirrorManager is the application that keeps track of the nearly 400 public mirrors,
and over 300 private mirrors, that carry Fedora, EPEL, and RHEL content, and is used
by rpmfusion.org, a third party repository. It automatically selects the "best"
mirror for a given user based on a set of fallback heuristics.

The complete MirrorManager functionality requires generate-mirrorlist-cache and
mirrorlist-server which can be found at https://github.com/adrianreber/mirrorlist-server.

This change involves migrating every end point where mirror selection occurs to being managed by MirrorBrain in some fashion (web downloads, the installer, urpmi, PackageKit/DNF) to massively improve the reliability of mirror selection and availability of Mageia content.

= Why it would be good for Mageia to use it =
Mageia's current mirror infrastructure has been crumbling under pressure for some time now. Among other things, users get a bad experience from bad mirrors randomly downgrading or missing necessary content, causing really unexpected things to occur on their systems.

It's exponentially worse for Cauldron users, where it's a hit-or-miss affair (mostly misses) to get up to date Cauldron content, especially for users in the Americas and Asia, where we have fewer mirrors in general.

MirrorBrain improves this experience by tracking mirrors and automatically filtering the list based on content availability, preventing users from seeing bad mirrors on a regular basis. In addition, the content redirector portion automatically determines a good, up to date mirror to use based on a number of factors about your connection, which ensures that you get a good experience for downloading content directly (through web browsers or through urpmi).

= Test case =
* Adding urpmi distrib media should give you MirrorBrain redirector
* The existing yum-style mirrorlist endpoint should work as-is with MirrorBrain
* The new metalink endpoint for rpm-md repos should work with PackageKit/DNF.

= Tasks =
* Deploy and activate MirrorBrain
* Migrate the mirror database from Mirmon to MirrorBrain
* Migrate the Yum style mirrorlist endpoint to MirrorBrain managed mirrorlist
* Migrate the urpmi distrib data to the MirrorBrain redirector URL (download.mageia.org or something similar)


= Software / Packages Dependencies =
* MirrorBrain
** MirrorBrain has been in Mageia for a while now, and is part of the standard repositories in Mageia 5 (which our infrastructure currently runs on)

= What could disrupt development of this new feature =
If the MirrorBrain deployment cannot be completed and mirror selector endpoints migrated, then this feature cannot be fully implemented.

= Planning =
Early inclusion into Mageia 8 would allow for good appropriation of administrator resources to roll this out and make sure everything works.

= Contingency =
If this fails to be ready for Mageia 8, then we fall back to our current infrastructure.

= Release Notes =
The release notes should indicate that Mageia now offers enhanced automatic mirror selection powered by MirrorBrain.

= Documentation =
* [http://mirrorbrain.org/ MirrorBrain website]

= Associated Bugs =
* [https://bugs.mageia.org/show_bug.cgi?id=3166 mga#3166]
* [https://bugs.mageia.org/show_bug.cgi?id=17400 mga#17400]

= Packager comments = Marja

‎Strengthening of our "trees of transition"

← Older revision Revision as of 18:56, 27 October 2024 (5 intermediate revisions by the same user not shown)Line 63: Line 63:  For this page 1 i picked all the problems identified by vouf in his mail and added those i could identify from my point of view... For this page 1 i picked all the problems identified by vouf in his mail and added those i could identify from my point of view...    −Please note that it's not to be considered as an ultimate truth... lack of informations, incomplete view of things, personal bias can lead to propose erroneous cause->consequence relations. Group feedback and number of reads and contributions is here the best way to compensate and lead all to a neutral but accurate analysis of the "current reality".+''Please note that it's not to be considered as an ultimate truth... lack of information, incomplete view of things, personal bias can lead to propose erroneous cause->consequence relations. Group feedback and number of reads and contributions is here the best way to compensate and lead all to a neutral but accurate analysis of the "current reality".'' −   −I did made errors in this 1st draft, if for sure forgot things, i maybe wrongly assumed things so  please do complete / challenge / explain...      +''I did made errors in this 1st draft, if for sure forgot things, i maybe wrongly assumed things so  please do complete / challenge / explain...  +''  Here is a quick overview of the beast : Here is a quick overview of the beast :    Line 77: Line 77:  [https://excalidraw.com/#room=2bb877bd17a4979fb123,C3TohUFwCKd7GdVkgf2BxQ Tree of current reality] [https://excalidraw.com/#room=2bb877bd17a4979fb123,C3TohUFwCKd7GdVkgf2BxQ Tree of current reality]    −From this tree, ideas were extracted:+From this tree, as it is very complicated to analyse a situation without having super ideas popping to improve things, ideas and suggestions were extracted to keep them safe:     [https://excalidraw.com/#room=af21369259707500e0a6,5uJ95Jrs-RmkssIWHwzAjQ Ideas, extracted from the Tree of Current Reality] [https://excalidraw.com/#room=af21369259707500e0a6,5uJ95Jrs-RmkssIWHwzAjQ Ideas, extracted from the Tree of Current Reality] Line 87: Line 87:    * Communication   * Communication    * Distribution / Wake makes us different / Specificity / Philosophy   * Distribution / Wake makes us different / Specificity / Philosophy  +  +Please focus on completing the description of all causes -> consequences in the 1st tree to reach a 360° view of our situation.  +  +If ideas keep popping in your mind add them to the "safe place for ideas" we will take them as a source of inspiration to build the "tree of FUTURE reality" describing the (ultra positive and inspiring) situation we want to get to...     <!--I kept the idea of priority you gave "as is" (down each proposal, close to your name)... the idea of prioritization is good, and i'd probably have a lot to say about it. <!--I kept the idea of priority you gave "as is" (down each proposal, close to your name)... the idea of prioritization is good, and i'd probably have a lot to say about it. Line 93: Line 97:     That's why i did not share immediately the 2nd Excalidraw url : i did not want to work too early on ideas and proposals because once we focus on some ideas that "attract us" the brain has difficulties to getback to the plane view... and if we want to do something that really works we need to have a global thinking, ensure that the whole strategy is healthy for all of us and for the project... and that all tasks and initiatives we take get well together and energize each other. --> That's why i did not share immediately the 2nd Excalidraw url : i did not want to work too early on ideas and proposals because once we focus on some ideas that "attract us" the brain has difficulties to getback to the plane view... and if we want to do something that really works we need to have a global thinking, ensure that the whole strategy is healthy for all of us and for the project... and that all tasks and initiatives we take get well together and energize each other. -->  +  +=Draft of our "tree of future reality" (TOFR)=  +  +This work did not start yet.  +  +It will consist in mirroring the current a bit negative tee into an other tree with all the positive we want to have in our distribution and community...  +  +=Draft of our "trees of transition"=  +  +This work did not start yet.  +  +Once we have defined the "tree of future reality" we will gather the "bad root causes" of the TOCR and the good root causes of the TOFR into a new drawing.  +  +And then we will define the measures to be taken to switch from the 1st set we don't want any more to the new set we want to live with. This will give a 1st idea of the practical steps to take to improve things globally and consistently.  +  +=Strengthening of our "trees of transition"=  +  +This work did not start yet.  +  +This last step is necessary to take in account potentially negative side effects or deal with obstacles. It changes a utopic program into a realistic and viable one.  +  +And after we will have to get into the action for good but with a clear and realistic plan. Maat

‎Draft of our "tree of current reality": add link to extracted ideas, include explanation (all from maât's third mail)

← Older revision Revision as of 14:14, 27 October 2024 Line 76: Line 76:     [https://excalidraw.com/#room=2bb877bd17a4979fb123,C3TohUFwCKd7GdVkgf2BxQ Tree of current reality] [https://excalidraw.com/#room=2bb877bd17a4979fb123,C3TohUFwCKd7GdVkgf2BxQ Tree of current reality]  +  +From this tree, ideas were extracted:  +  +[https://excalidraw.com/#room=af21369259707500e0a6,5uJ95Jrs-RmkssIWHwzAjQ Ideas, extracted from the Tree of Current Reality]  +  +They are grouped into 4 mega domains :  +  + * Organization  + * Mentoring / learning / training  + * Communication  + * Distribution / Wake makes us different / Specificity / Philosophy  +  +<!--I kept the idea of priority you gave "as is" (down each proposal, close to your name)... the idea of prioritization is good, and i'd probably have a lot to say about it.  +  +Though i limited my work on this sheet to gather quickly and group ideas without really working on them deeply... And  that because during brainstorming process if we jump the gun ("brûler les étapes" in french) we take a big risk to miss things  and interfere with brainstorming process.  +  +That's why i did not share immediately the 2nd Excalidraw url : i did not want to work too early on ideas and proposals because once we focus on some ideas that "attract us" the brain has difficulties to getback to the plane view... and if we want to do something that really works we need to have a global thinking, ensure that the whole strategy is healthy for all of us and for the project... and that all tasks and initiatives we take get well together and energize each other. --> Marja

Import large parts of Maât's first two mails

New page

So, what will we do with all the information that was added and that will be added to [[Brainstorming about how to get more active contributors]]?

We decided to use a method, called the [https://en.wikipedia.org/wiki/Theory_of_constraints Theory of constraints].

=Theory of constraints - Introduction=

The principle in short is to go through 4 steps :

==Describing the reality we want to change==
through a network diagram of "cause(s)-> consequence(s)" relations called the
'''tree of current reality'''.
Generally these are negative cause->consequence relations.
This work is among the most depressing in the world... thanks God
it's temporary and the following step is much more inspiring.
The link at the bottom of this page shows the current draft for our
"tree of current reality"... Please read it / complete it / fix it in
the purest tradition of open source.

==Describing the desired reality==
that we want to reach, specified in the
same "opposite" diagram form (Still cause(s)->consequence(s) but
this time we purposefully seek the positive to describe the world we
want to build)
This 2nd tree is called '''tree of future reality'''... working on this is an
amazing experience (in particular if it's done as a team around a whiteboard
with beers and snacks to enjoy... maybe we could not do it that way
but if you have ideas they are welcome!)
The result is something that fills people with energy and
enthusiasm... it might a little bit theoretical and maybe a bit
utopian too (that's not a problem at this step we have the right to
dream... the time for criticism and realism comes always too fast in
this process)

==Look closer at all the boxes and arrows==
In those 2 trees you will see boxes and arrows... among all these
boxes those who get all the connected arrows going to them are
generally final consequences. More interesting for us those who have
all the connected arrows leaving them are generally root causes. The
goal of this 3rd step is to define a path to replace bad root causes
by good ones.
We put all the bad causes on one side of the page, all the good
causes on the other and we brainstorm to get from one situation to
the other with changes/decisions.
The result is generally several diagrams /situation + change -> new
situation (several '''change trees'''). But changes can be blocked by things or lead to negative
side effect... the next step brings back realism and problem solving
work.

==For each "change tree" identify all blockers and such==
so identify all blockers and negative side effects to complete the tree with
accompanying measures to neutralize blockers and painful side effects.
The result is a set of optimized "change trees" with measures to
take that everybody agrees on : "OMG that could work !!!"

After that we are back to business but with a vision + a battle plan + renewed energy. Which changes everything.



=Draft of our "tree of current reality"=

<!--I started from vouf's mail analysis (very good one) and splitted it in 3 pages : pages 2 and 3 are for later (questions and proposals... but questions will have to be answered to build the tree of future reality) and page 1 for now.

For this page 1 i picked all the problems identified by vouf in his mail and added those i could identify from my point of view...

Please note that it's not to be considered as an ultimate truth... lack of informations, incomplete view of things, personal bias can lead to propose erroneous cause->consequence relations. Group feedback and number of reads and contributions is here the best way to compensate and lead all to a neutral but accurate analysis of the "current reality".

I did made errors in this 1st draft, if for sure forgot things, i maybe wrongly assumed things so please do complete / challenge / explain...

Here is a quick overview of the beast :

In red the final consequences, in yellow the potential root causes. I kept a few positive notes for vouf's mail because i wanted to keep as much information as possible and also because i agree on those positive things.

Nowi need to let my brains rest a bit to get back to this tree in a few days... generally it takes several sessions to stabilize such tree.

Hope you'll find the principle interesting and that we will work soon on the "tree of future reality" all together.-->

[https://excalidraw.com/#room=2bb877bd17a4979fb123,C3TohUFwCKd7GdVkgf2BxQ Tree of current reality] Marja

← Older revision Revision as of 13:46, 27 October 2024 Line 4: Line 4:     So maybe the guide should be changed that way, or could there be a problem with that order, to start with installing packages before executing the rest (maybe I was lucky?) So maybe the guide should be changed that way, or could there be a problem with that order, to start with installing packages before executing the rest (maybe I was lucky?)  +  +- Also, regarding disabling net_applet autostart, mention to do it for every desktop user.     /Morgan /Morgan Morgano

← Older revision Revision as of 09:54, 27 October 2024 Line 4: Line 4:  As explained in [[Mirror List]], it may be needed to contact the maintainer of a mirror. As explained in [[Mirror List]], it may be needed to contact the maintainer of a mirror.    −Please add any contact that you know of. The records should be sorted alphabetically by their shortest names.+Please add any contact that you know of. The records should be sorted alphabetically by their short name.        {| class="wikitable" style="margin:auto" {| class="wikitable" style="margin:auto" −|+ Mirror Contacts+|+ Mageia main mirror  +! Mirror address !! Short name !! Contact !! E-mail address || Additional info  |- |- −! Mirror address !! shortest name !! Whom to contact !! e-mail address+| rsync://rsync.mageia.org/mageia || Mageia || Sysadmin Team || sysadmin [AT] group [DOT] mageia [DOT] org || Only for 1st tier mirrors −|-+|} −| https://distro.ibiblio.org/mageia/ || Ibiblio || Don Sizemore || dls [AT] ibiblio [DOT] org+   +   +{| class="wikitable" style="margin:auto"  +|+ Mirror sites  +! Mirror address !! Short name !! Contact !! E-mail address || Additional info  |- |- −| Mageia rsync (only for 1st tier mirrors) || Mageia || Sysadmin Team || sysadmin [AT] group [DOT] mageia [DOT] org+| https://distro.ibiblio.org/mageia/ || Ibiblio || Don Sizemore || dls [AT] ibiblio [DOT] org || 1st tier mirror  |- |- −| https://mirror.math.princeton.edu/|| Princeton || Benjamin Rose || benrose [AT] math [DOT] princeton [DOT] edu+| https://mirror.math.princeton.edu/|| Princeton || Benjamin Rose || benrose [AT] math [DOT] princeton [DOT] edu || 1st tier mirror  |- |- −| https://ftp.snt.utwente.nl/ || Twente || the ftpcom || ftpcom_at_snt.utwente.nl+| https://ftp.snt.utwente.nl/ || Twente || ftpcom || ftpcom [AT] snt [DOT] utwente [DOT] nl ||  |} |} Wally

create a table, add categories

← Older revision Revision as of 09:34, 27 October 2024 Line 1: Line 1:  +[[Category:Documentation]]  +[[Category:Mirrors]]  +  As explained in [[Mirror List]], it may be needed to contact the maintainer of a mirror. As explained in [[Mirror List]], it may be needed to contact the maintainer of a mirror.    −Please add any contact that you know of.+Please add any contact that you know of. The records should be sorted alphabetically by their shortest names.    −We should probably create a table for this.     −Ibiblio: Don Sizemore - dls [AT] ibiblio [DOT] org <br>+{| class="wikitable" style="margin:auto" −Princeton: Benjamin Rose - benrose [AT] math [DOT] princeton [DOT] edu+|+ Mirror Contacts  +|-  +! Mirror address !! shortest name !! Whom to contact !! e-mail address  +|-  +| https://distro.ibiblio.org/mageia/ || Ibiblio || Don Sizemore || dls [AT] ibiblio [DOT] org  +|-  +| Mageia rsync (only for 1st tier mirrors) || Mageia || Sysadmin Team || sysadmin [AT] group [DOT] mageia [DOT] org  +|-  +| https://mirror.math.princeton.edu/|| Princeton || Benjamin Rose || benrose [AT] math [DOT] princeton [DOT] edu  +|-  +| https://ftp.snt.utwente.nl/ || Twente || the ftpcom || ftpcom_at_snt.utwente.nl  +|} Marja

‎Upgrade from the latest stable release to Cauldron using DNF

← Older revision Revision as of 08:09, 27 October 2024 (One intermediate revision by the same user not shown)Line 57: Line 57:     If you want to use mirrorlist: If you want to use mirrorlist: −{{command|urpmi.addmedia --distrib --mirrorlist <nowiki>'http://mirrors.mageia.org/api/mageia.cauldron.i686.list'</nowiki>|prompt=#}}+{{command|urpmi.addmedia --distrib --mirrorlist <nowiki>'https://mirrors.mageia.org/api/mageia.cauldron.i686.list'</nowiki>|prompt=#}}  or: or: −{{command|urpmi.addmedia --distrib --mirrorlist <nowiki>'http://mirrors.mageia.org/api/mageia.cauldron.x86_64.list'</nowiki>|prompt=#}}+{{command|urpmi.addmedia --distrib --mirrorlist <nowiki>'https://mirrors.mageia.org/api/mageia.cauldron.x86_64.list'</nowiki>|prompt=#}}     If you want to use a specific server (the URL is an example tier 1 mirror): If you want to use a specific server (the URL is an example tier 1 mirror): Line 83: Line 83:     If you're using an x86_64 machine and need 32-bit repositories enabled, run: If you're using an x86_64 machine and need 32-bit repositories enabled, run: −{{command|dnf config-manager --set-enabled cauldron-i586|prompt=#}}+{{command|dnf config-manager --set-enabled cauldron-i686|prompt=#}}     If you need nonfree or tainted enabled, run (Substitute "{arch}" and "{section}" for the desired architecture and nonfree/tainted as you need): If you need nonfree or tainted enabled, run (Substitute "{arch}" and "{section}" for the desired architecture and nonfree/tainted as you need): Wally

Publication date: 27 Oct 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-31227 , CVE-2024-31228 , CVE-2024-31449 Description An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. (CVE-2024-31227) Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. (CVE-2024-31228) An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. (CVE-2024-31449) References

• https://bugs.mageia.org/show_bug.cgi?id=33643
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EMP3URK6CE4LGQZ7V2GD23UVMTFM7K46/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31227
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31228
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31449

SRPMS 9/core

• redis-7.0.14-1.1.mga9

Publication date: 27 Oct 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-45321 Description The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers. (CVE-2024-45321) References

• https://bugs.mageia.org/show_bug.cgi?id=33631
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X5W36RUTOUQ2VUGWG2FCEBOWNRYS6RBI/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45321

SRPMS 9/core

• cpanminus-1.704.500-2.1.mga9

Publication date: 27 Oct 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-45490 , CVE-2024-45491 , CVE-2024-45492 Description An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. (CVE-2024-45490) An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45491) An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492) References

• https://bugs.mageia.org/show_bug.cgi?id=33630
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NII5WWMANSN5NYNMNOK7LJ2P5FT7TW5X/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492

SRPMS 9/core

• mozjs78-78.15.0-7.1.mga9