51 matches found
[SECURITY] Fedora 39 Update: linux-firmware-20240909-1.fc39
This package includes firmware files required for some devices to operate...
[SECURITY] Fedora 41 Update: linux-firmware-20240909-1.fc41
This package includes firmware files required for some devices to operate...
[SECURITY] Fedora 40 Update: linux-firmware-20240909-1.fc40
This package includes firmware files required for some devices to operate...
ALSA-2024:4262 Moderate: linux-firmware security update
The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: kernel: Reserved fields in guest message responses may not be zero initialized CVE-2023-31346 For more details about the security issues, including the impact, a CVSS...
PT-2024-13281 · Westermo · Westermo Lynx
Name of the Vulnerable Software and Affected Versions: Westermo Lynx affected versions not specified Description: A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device. Recommendations: At the...
Moderate: Red Hat Security Advisory: linux-firmware security, bug fix, and enhancement update
An update for linux-firmware is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
[SECURITY] Fedora 37 Update: linux-firmware-20230919-1.fc37
This package includes firmware files required for some devices to operate...
[SECURITY] Fedora 38 Update: linux-firmware-20230919-1.fc38
This package includes firmware files required for some devices to operate...
[SECURITY] Fedora 37 Update: linux-firmware-20230804-153.fc37
This package includes firmware files required for some devices to operate...
[SECURITY] Fedora 38 Update: linux-firmware-20230804-153.fc38
This package includes firmware files required for some devices to operate...
CVE-2023-25645
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and...
Design/Logic Flaw
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and...
CVE-2023-25645
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and...
CVE-2023-25645
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and...
Session fixation
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operatio...
CVE-2023-28809
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operatio...
CVE-2023-28809
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operatio...
[SECURITY] Fedora 36 Update: linux-firmware-20220310-130.fc36
This package includes firmware files required for some devices to operate...