https://bugzilla.redhat.com/show_bug.cgi?id=2354446
shows that Fedora/RedHat have pushed a fix - but no sign of that!

No choice but to assign this globally;

Assignee: bugsquad => pkg-bugs

Suggested advisory:
========================

The updated packages fix a security vulnerability:

Hercules Augeas fa.c re_case_expand null pointer dereference. (CVE-2025-2588)

References:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JLS6PXWXBARZ5FZS4C2ASIP6X56BMH24/
========================

Updated packages in core/updates_testing:
========================
augeas-1.12.0-4.1.mga9
augeas-lenses-1.12.0-4.1.mga9
lib(64)augeas0-1.12.0-4.1.mga9
lib(64)augeas-devel-1.12.0-4.1.mga9
lib(64)fa1-1.12.0-4.1.mga9

from SRPM:
augeas-1.12.0-4.1.mga9.src.rpm

Version: Cauldron => 9
Whiteboard: MGA9TOO => (none)
Source RPM: augeas-1.12.0-5.mga10.src.rpm, augeas-1.12.0-4.mga9.src.rpm => augeas-1.12.0-4.mga9.src.rpm
Assignee: pkg-bugs => qa-bugs
Status: NEW => ASSIGNED

MGA9-64 Plasma Wayland on Compaq H000SB
No installation issues.
Ref bug 21549 for testing:
$ augtool
augtool> help

Admin commands:
  context    - change how relative paths are interpreted
  load       - (re)load files under /files
  save       - save all pending changes
  transform  - add a file transform
  load-file  - load a specific file
  retrieve   - transform tree into text
  store      - parse text into tree
  quit       - exit the program
and more...
augtool> print /files/etc
displays whole tree of /etc: some 1200+ lines
same with 
augtool> print /files/lib
Lists a few hundreds lines
augtool> quit
$ augparse --version 
augparse 1.12.0 <http://augeas.net/>
Copyright (C) 2007-2016 David Lutterkort
License LGPLv2+: GNU LGPL version 2.1 or later
                 <http://www.gnu.org/licenses/lgpl-2.1.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Written by David Lutterkort

Did not venture into Len's testing, which he concluded "Having to give up on this one - been at it for hours.  Almost no progress."
And William OK'ed on clean install, so let go.

Whiteboard: (none) => MGA9-64-OK
CC: (none) => herman.viaene

Yeah, I saw that. I miss wilcal.

Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2025-0128.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED