MGASA-2025-0298 - Updated stardict packages fix security vulnerability. MGASA-2025-0298 - Updated stardict packages fix security vulnerability Publication date: 15 Nov 2025 URL: https://advisories.mageia.org/MGASA-2025-0298.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-55014 Description: The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP. (CVE-2025-55014) References: - https://bugs.mageia.org/show_bug.cgi?id=34533 - https://seclists.org/oss-sec/2025/q3/75 - https://seclists.org/oss-sec/2025/q3/81 - https://www.cve.org/CVERecord?id=CVE-2025-55014 SRPMS: - 9/core/stardict-3.0.6.3-2.1.mga9 . Mageia released a security update for stardict addressing CVE-2025-55014, which involved cleartext data vulnerabilities.. Mageia Security, Stardict Update, CVE-2025-55014, Cleartext Vulnerability, Mageia Advisory. . Severity: Important. LinuxSecurity.com Team
gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext. (CVE-2025-48708) References: . MGASA-2025-0170 - Updated ghostscript packages fix security vulnerabilities Publication date: 28 May 2025 URL: https://advisories.mageia.org/MGASA-2025-0170.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-48708 gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext. (CVE-2025-48708) References: - https://bugs.mageia.org/show_bug.cgi?id=34307 - https://www.openwall.com/lists/oss-security/2025/05/23/2 - https://www.cve.org/CVERecord?id=CVE-2025-48708 SRPMS: - 9/core/ghostscript-10.05.1-1.mga9 . Revised ghostscript packages fix security flaws in PDFs that could compromise passwords, impacting Mageia 9 users.. Ghostscript Security, PDF Password Exposure, Mageia Update. . Severity: Critical. LinuxSecurity.com Team
Update to ldb 2.5.3 and samba 4.16.10 Security fixes for CVE-2023-0922, CVE-2023-0614. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-1c172e3264 2023-04-16 02:06:21.124597 --------------------------------------------------------------------------------Name : samba Product : Fedora 36 Version : 4.16.10 Release : 0.fc36 URL : Summary : Server and Client software to interoperate with Windows machines Description : Samba is the standard Windows interoperability suite of programs for Linux and Unix. --------------------------------------------------------------------------------Update Information: Update to ldb 2.5.3 and samba 4.16.10 Security fixes for CVE-2023-0922, CVE-2023-0614 --------------------------------------------------------------------------------ChangeLog: * Wed Mar 29 2023 Guenther Deschner - 4.16.10-0 - Update to version 4.16.10 - resolves: #2182774, #2182775 - Security fixes for CVE-2023-0922 - resolves: #2182776, #2182777 - Security fixes for CVE-2023-0614 --------------------------------------------------------------------------------References: [ 1 ] Bug #2182775 - CVE-2023-0922 samba: AD DC admin tool samba-tool sends passwords in cleartext [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2182775 [ 2 ] Bug #2182777 - CVE-2023-0614 samba: Access controlled AD LDAP attributes can be discovered [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2182777 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-1c172e3264' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.