Current Update candidates

See QA process for validating updates for instructions (and join our QA IRC channel).

A means "QA team waiting for packager feedback". A star* next to the update type means that an advisory has been uploaded to SVN already.


Mageia 8

Update
type
Bug number Summary (hover for RPM name) Test 32 Test 64 Proced.
avail.?
Mageia
Version
No action
for (days)
Lists Quick search
security 32280 libwebp new security issue CVE-2023-4863       8 9 4 RPMs Bugzilla, Wiki (libwebp)
security 32342 0-day in libvpx       8 9 0 RPMs Bugzilla, Wiki (libvpx)
security 32092 fusiondirectory new security issues CVE-2022-36179 and CVE-2022-36180       8 9 13 RPMs Bugzilla, Wiki (fusiondirectory)
security 32274 cjose new security issue CVE-2023-37464       8 9 11 RPMs Bugzilla, Wiki (cjose)
security 32281 cups new security issue CVE-2023-32360 and CVE-2023-4504       8 9 2 RPMs Bugzilla, Wiki (cups)
security 32285 shadow new security issue CVE-2023-4641       8 9 3 RPMs Bugzilla, Wiki (shadow-utils)
bugfix 31451 Mageia Welcome should inform users installing VirtualBox that it is not supported on 32-bit systems       8 9 13 RPMs Bugzilla, Wiki (mageiawelcome)
bugfix 31591 Mageia 9 qarte isn't able to display arte.tv items and download arte concert       8 9 1 RPMs Bugzilla, Wiki (.qarte 4.16.0.1.mga8, qarte)
bugfix 32149 libva-vdpau-driver need libva-vdpau-driver-chromium patchs       8 9 50 RPMs Bugzilla, Wiki (vaapi-driver-vdpau)
bugfix 32211 l2tp w ipsec isn't work after the upgrade to M9, looks like a libreswan problem       8 9 22 RPMs Bugzilla, Wiki (networkmanager-l2tp)
bugfix 32316 Arte TV in yt-dlp is broken   OK   8 9 1 RPMs Bugzilla, Wiki (yt-dlp)
Number of update candidates: 15 (security: 9, bugfix: 6, enhancement: 0)
Number of backports : 0

Mageia 9

Update
type
Bug number Summary (hover for RPM name) Test 32 Test 64 Proced.
avail.?
Mageia
Version
No action
for (days)
Lists Quick search
security 32039 bind new security issues CVE-2023-3341 and CVE-2023-4236       8 9 2 RPMs Bugzilla, Wiki (bind)
security 32280 libwebp new security issue CVE-2023-4863   OK   8 9 4 RPMs Bugzilla, Wiki (libwebp)
security 32342 0-day in libvpx       8 9 0 RPMs Bugzilla, Wiki (libvpx)
security 32092 fusiondirectory new security issues CVE-2022-36179 and CVE-2022-36180       8 9 13 RPMs Bugzilla, Wiki (fusiondirectory)
security 32274 cjose new security issue CVE-2023-37464       8 9 11 RPMs Bugzilla, Wiki (cjose)
security 32281 cups new security issue CVE-2023-32360 and CVE-2023-4504       8 9 2 RPMs Bugzilla, Wiki (cups)
security 32285 shadow new security issue CVE-2023-4641       8 9 3 RPMs Bugzilla, Wiki (shadow-utils)
security 32317 Chromium-browser 117.0.5938.92 fixes bugs and vulnerabilities       8 9 3 RPMs Bugzilla, Wiki (chromium-browser-stable)
security 32319 Haproxy subversion update       8 9 2 RPMs Bugzilla, Wiki (haproxy)
bugfix 31591 Mageia 9 qarte isn't able to display arte.tv items and download arte concert       8 9 1 RPMs Bugzilla, Wiki (.qarte 4.16.0.1.mga8, qarte)
bugfix 32085 speech-dispatcher could be set to be run as specific user       8 9 7 RPMs Bugzilla, Wiki (svox-pico)
bugfix 32197 Update candidate: GNUCobol 3.2       8 9 32 RPMs
bugfix 32198 Blank pdf output from cups-pdf 3.0.1-3.mga9       8 9 25 RPMs Bugzilla, Wiki (cups-pdf)
bugfix 32211 l2tp w ipsec isn't work after the upgrade to M9, looks like a libreswan problem       8 9 22 RPMs Bugzilla, Wiki (networkmanager-l2tp)
bugfix 32222 Backintime (user or root) d'nt lauch.       8 9 11 RPMs Bugzilla, Wiki (backintime)
bugfix 32225 xscreensaver : new version 6.07       8 9 23 RPMs Bugzilla, Wiki (xscreensaver)
bugfix 32262 CodeBlocks was removed from Mageia 9 by accident, will be back       8 9 12 RPMs Bugzilla, Wiki (codeblocks)
bugfix 32264 networkmanager-openconnect: rebuild with gtk4+ needed       8 9 20 RPMs Bugzilla, Wiki (networkmanager-openconnect)
bugfix 32293 Update request: systemd-253.10-1.mga9       8 9 1 RPMs Bugzilla, Wiki (systemd)
bugfix 32294 Update request: nftables-1.0.6-1.1.mga9       8 9 13 RPMs Bugzilla, Wiki (nftables)
bugfix 32296 Update request: kernel-6.5.3-1.mga9       8 9 1 RPMs Bugzilla, Wiki (kernel)
bugfix 32297 Update request: kernel-linus-6.5.3-1.mga9   OK   8 9 1 RPMs Bugzilla, Wiki (kernel-linus)
bugfix 32316 Arte TV in yt-dlp is broken       8 9 1 RPMs Bugzilla, Wiki (yt-dlp)
bugfix 32332 qemu and xen updated packages fix vulnerabilities, also improves stability       8 9 1 RPMs
Number of update candidates: 25 (security: 10, bugfix: 15, enhancement: 0)
Number of backports : 0




Below is a list of validated updates waiting to be pushed to the updates media. Those without a star* need an advisory to be uploaded, first.

Mageia 8

Update
type
Bug number Summary (hover for RPM name) Test 32 Test 64 Proced.
avail.?
Mageia
Version
No action
for (days)
Lists Quick search
security* 32176 nodejs new security issues fixed upstream in 18.17.1 (CVE-2023-32002[6], CVE-2023-32559)   OK   8 9 1 RPMs Bugzilla, Wiki (nodejs)
security 32120 iperf new security issue fixed upstream in 3.14 (CVE-2023-38403)   OK yes 8 9 5 RPMs Bugzilla, Wiki (iperf)
security* 32203 java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk and java-latest-openjdk new security issues   OK   8 9 2 RPMs Bugzilla, Wiki (.java)
security 32273 indent new security issues, including CVE-2023-40305   OK   8 9 5 RPMs Bugzilla, Wiki (indent)
security 32275 wireshark new security issues CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513   OK   8 9 3 RPMs Bugzilla, Wiki (wireshark)
security 32276 xrdp new security issue CVE-2023-40184   OK   8 9 3 RPMs Bugzilla, Wiki (xrdp)
security 32283 flac new security issue CVE-2020-22219   OK   8 9 5 RPMs Bugzilla, Wiki (flac)
security 32303 giflib new security issue CVE-2023-39742   OK   8 9 2 RPMs Bugzilla, Wiki (giflib)
security 32304 libxml2 new security issue CVE-2023-39615   OK   8 9 2 RPMs Bugzilla, Wiki (libxml2)
Number of validated updates: 9

Mageia 9

Update
type
Bug number Summary (hover for RPM name) Test 32 Test 64 Proced.
avail.?
Mageia
Version
No action
for (days)
Lists Quick search
security* 32176 nodejs new security issues fixed upstream in 18.17.1 (CVE-2023-32002[6], CVE-2023-32559)   OK   8 9 1 RPMs Bugzilla, Wiki (nodejs)
security 32120 iperf new security issue fixed upstream in 3.14 (CVE-2023-38403)   OK yes 8 9 5 RPMs Bugzilla, Wiki (iperf)
security* 32203 java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk and java-latest-openjdk new security issues OK OK   8 9 2 RPMs Bugzilla, Wiki (.java)
security 32248 quictls new security issues CVE-2023-2975, CVE-2023-3446 and CVE-2023-3817   OK   8 9 4 RPMs Bugzilla, Wiki (quictls)
security 32273 indent new security issues, including CVE-2023-40305   OK   8 9 5 RPMs Bugzilla, Wiki (indent)
security 32275 wireshark new security issues CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513   OK   8 9 3 RPMs Bugzilla, Wiki (wireshark)
security 32276 xrdp new security issue CVE-2023-40184   OK   8 9 3 RPMs Bugzilla, Wiki (xrdp)
security 32303 giflib new security issue CVE-2023-39742   OK   8 9 2 RPMs Bugzilla, Wiki (giflib)
security 32304 libxml2 new security issue CVE-2023-39615   OK   8 9 2 RPMs Bugzilla, Wiki (libxml2)
bugfix 32136 fsarchiver: add EXT4 orphan_file feature   OK   8 9 0 RPMs Bugzilla, Wiki (fsarchiver)
bugfix 32181 mariadb: new version 10.11.5   OK   8 9 2 RPMs Bugzilla, Wiki (mariadb)
bugfix 32200 rtl8192eu module fails to build with 6.4.9 kernel   OK   8 9 1 RPMs Bugzilla, Wiki (dkms-rtl8192eu)
bugfix 32265 wrong graphics in Flightgear   OK   8 9 1 RPMs Bugzilla, Wiki (flightgear-data)
bugfix* 32295 Update request: mesa-23.1.7-1.mga9 and libdrm-2.4.116-2.mga9 OK OK   8 9 2 RPMs Bugzilla, Wiki (.mesa, libdrm)
bugfix 32318 pngcrush report inconsistent source files versions   OK   8 9 3 RPMs Bugzilla, Wiki (pngcrush)
bugfix* 32324 Please add konsole back to the Plasma desktop context menu OK OK   8 9 1 RPMs Bugzilla, Wiki (plasma-workspace)
Number of validated updates: 16


Below is a list of validated backports waiting to be pushed to the backports media. Those without a star* need an advisory to be uploaded, first.

Mageia 8

Update
type
Bug number Summary (hover for RPM name) Test 32 Test 64 Proced.
avail.?
Mageia
Version
No action
for (days)
Lists Quick search
Number of validated backports: 0

Mageia 9

Update
type
Bug number Summary (hover for RPM name) Test 32 Test 64 Proced.
avail.?
Mageia
Version
No action
for (days)
Lists Quick search
Number of validated backports: 0