An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps.
Category Archives: Advisories
CVE-2020-14120
Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of checksum when using a three-party application to pass in parameters, and attackers can induce users to install a malicious app and use the vulnerability to achieve elevated privileges, making the normal services of the system affected.
podman-3.4.7-1.fc34
FEDORA-2022-5e637f6cc6
Packages in this update:
podman-3.4.7-1.fc34
Update description:
Security fixes for CVE-2022-1227, CVE-2022-21698, CVE-2022-27191, CVE-2022-27649
ruby-3.0.4-152.fc34
FEDORA-2022-82a9edac27
Packages in this update:
ruby-3.0.4-152.fc34
Update description:
Rebuilt.
podman-3.4.7-1.fc35
FEDORA-2022-c87047f163
Packages in this update:
podman-3.4.7-1.fc35
Update description:
Security fixes for CVE-2022-1227, CVE-2022-21698, CVE-2022-27191, CVE-2022-27649
ruby-3.0.4-152.fc35
FEDORA-2022-8cf0124add
Packages in this update:
ruby-3.0.4-152.fc35
Update description:
Upgrade to Ruby 3.0.4.
perl-App-cpanminus-1.7045-3420220414075222.f34
FEDORA-MODULAR-2022-3608f8903c
Packages in this update:
perl-App-cpanminus-1.7045-3420220414075222.f34
Update description:
1.7045 – [CVE-2020-16154] remove the functionality to verify CHECKSUMS signature
perl-App-cpanminus-1.7045-3520220414075222.f35
FEDORA-MODULAR-2022-546fde32d6
Packages in this update:
perl-App-cpanminus-1.7045-3520220414075222.f35
Update description:
1.7045 – [CVE-2020-16154] remove the functionality to verify CHECKSUMS signature
perl-App-cpanminus-1.7045-3620220414075222.f36
FEDORA-MODULAR-2022-374f093c23
Packages in this update:
perl-App-cpanminus-1.7045-3620220414075222.f36
Update description:
1.7045 – [CVE-2020-16154] remove the functionality to verify CHECKSUMS signature
firefox-stable-3520220420085727.1 thunderbird-stable-3520220420101307.1
FEDORA-FLATPAK-2022-a5f56fc396
Packages in this update:
firefox-stable-3520220420085727.1
thunderbird-stable-3520220420101307.1
Update description:
Firefox 99 and Thunderbird 91.8 Flatpak updates