Advisories » MGASA-2025-0241

Updated quictls packages with two security issues and bug fixes

Publication date: 20 Oct 2025
Modification date: 20 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-9230 , CVE-2025-9232

Description

Two security issues and miscellaneous minor bug fixes.
Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)
Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34674
• https://openssl-library.org/news/vulnerabilities/#CVE-2025-9230
• https://openssl-library.org/news/vulnerabilities/#CVE-2025-9232
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9232

SRPMS

9/core

• quictls-3.0.18-1.mga9