gnome-initial-setup bug fix and enhancement update

An update is available for gnome-initial-setup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

gnome-initial-setup bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

rt-setup bug fix and enhancement update

An update is available for rt-setup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...

CVE-2022-28782

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

CVE-2022-28782

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

CVE-2022-28782

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

Improper access control

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

CVE-2022-28782

CVE-2022-28782 concerns Samsung’s Contents To Window in the context of the SMR May-2022 Release 1. The issue is described as an improper access control that could allow a physical attacker to install a package before the Setup wizard finishes. The available remediation is a patch that blocks the ...

PT-2022-19230 · Unknown · Contents To Window

Name of the Vulnerable Software and Affected Versions: Contents To Window versions prior to SMR May-2022 Release 1 Description: The issue is related to improper access control, allowing a physical attacker to install a package before the completion of the Setup wizard. This can be exploited by a...

CVE-2022-28782: Improper Protection of Alternate Path

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

CVE-2022-0363

The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, allowing any authenticated users, such as subscribers, to call it and import mycred setup, thus creating badges, managing points or creating arbitrary posts...

OpenSSL dsa_sign_setup Disclosure of Protected Information

The vulnerability of the dsasignsetup function in the OpenSSL library is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to circumvent the cryptographic mechanisms used for encryption protection...

GSD-2022-1001649 spi: cadence-quadspi: fix protocol setup for non-1-1-X operations

spi: cadence-quadspi: fix protocol setup for non-1-1-X operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...

PT-2022-29241

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue concerns a protocol setup fix for non-1-1-X operations in the cadence-quadspi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29325

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.3,...

PT-2022-29992

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.3...

PT-2022-29451

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.17.1 Description The issue concerns a fix in the return value of the setup handler in kgdboc. It was introduced in version 4.20 and fixed in version 5.17.2. The actual impact and attack plausibility have no...

PT-2022-29485

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.17.1 Description The issue concerns error handling in ath10k setup msa resources. It was introduced in version v5.8 and fixed in version v5.17.2. The actual impact and attack plausibility have not yet been...

PT-2022-30117

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.32 Description The issue concerns error handling in ath10k setup msa resources. It was introduced in version v5.8 and fixed in version v5.15.33. The actual impact and attack plausibility have not yet be...

PT-2022-30618

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue concerns a fix in the return value of the setup handler. It was introduced in version v4.19.2 and fixed in version v4.19.238. The actual impact and attack plausibility have not yet...