Western Digital My Cloud Home & Duo Firmware 9.8.0-102
WDC Tracking Number: WDC-25002
Product Line/Web: My Cloud Home
Published: March 27, 2025
Last Updated: April 7, 2025
Description
My Cloud Home & Duo Firmware 9.8.0-102 includes updates to help improve the security of your My Cloud Home devices.
For more information on the latest security updates, see the release notes. My Cloud Home, and My Cloud Home Duo devices will be automatically updated to reflect the latest firmware version.
Advisory Summary
Updated open-source Docker package to version 20.10.5+dfsg1-1+deb11u3 to resolve CVE-2024-41110 which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances.
CVE Number: CVE-2024-41110
Updated open-source ffmpeg package to version 4.3.6 to improve transcoding performance and stability.
CVE Number: CVE-2022-3109
Updated open-source GLIBC package to version 2.31-13+deb11u11 to resolve CVE-2023-4911 that allowed a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
CVE Number: CVE-2023-4911