Suggested advisory:
========================

The updated packages fix a security vulnerability:

cmake cmForEachCommand.cxx ReplayItems assertion. (CVE-2025-9301)

References:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LRYGBCSAOIXW3H7GXSATU2RXSYBKTGFL/
========================

Updated packages in core/updates_testing:
========================
cmake-3.26.4-1.1.mga9
cmake-qtgui-3.26.4-1.1.mga9

from SRPM:
cmake-3.26.4-1.1.mga9.src.rpm

Flags: affects_mga9+ => (none)
Whiteboard: MGA9TOO => (none)
Status: NEW => ASSIGNED
Source RPM: cmake-4.1.3-1.mga10.src.rpm, cmake-3.26.4-1.mga9.src.rpm => cmake-3.26.4-1.mga9.src.rpm
Assignee: bugsquad => qa-bugs
Version: Cauldron => 9

Installed and tested without issues.


Tested on several dozen CMakeLists.txt files without issues.
Tested both the GUI and CLI.



System: Mageia 9, x86_64, Plasma DE, AMD Ryzen 5 5600G with Radeon Graphics using amdgpu driver.



$ uname -a
Linux jupiter 6.6.120-desktop-1.mga9 #1 SMP PREEMPT_DYNAMIC Wed Jan 14 01:59:53 UTC 2026 x86_64 GNU/Linux
$ rpm -q cmake cmake-qtgui
cmake-3.26.4-1.1.mga9
cmake-qtgui-3.26.4-1.1.mga9

CC: (none) => mageia

Have been using this update for 3 days without issues, so I'm giving an OK for x86_64.

Flags: (none) => test_passed_mga9_64+
Whiteboard: (none) => MGA9-64-OK

Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2026-0069.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED