Linux · Security advisory · May 22, 2024

ALSA-2024:3178: Security update for 21 packages

ALSA-2024:3178, released May 22, 2024, fixes 2 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0102
63rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
iwl100-firmwarealmalinux 839.31.5.1-121.el8.1
iwl1000-firmwarealmalinux 81:39.31.5.1-121.el8.1
iwl105-firmwarealmalinux 818.168.6.1-121.el8.1
iwl135-firmwarealmalinux 818.168.6.1-121.el8.1
iwl2000-firmwarealmalinux 818.168.6.1-121.el8.1
iwl2030-firmwarealmalinux 818.168.6.1-121.el8.1
iwl3160-firmwarealmalinux 81:25.30.13.0-121.el8.1
iwl3945-firmwarealmalinux 815.32.2.9-121.el8.1
iwl4965-firmwarealmalinux 8228.61.2.24-121.el8.1
iwl5000-firmwarealmalinux 88.83.5.1_1-121.el8.1
iwl5150-firmwarealmalinux 88.24.2.2-121.el8.1
iwl6000-firmwarealmalinux 89.221.4.1-121.el8.1
iwl6000g2a-firmwarealmalinux 818.168.6.1-121.el8.1
iwl6000g2b-firmwarealmalinux 818.168.6.1-121.el8.1
iwl6050-firmwarealmalinux 841.28.5.1-121.el8.1
iwl7260-firmwarealmalinux 81:25.30.13.0-121.el8.1
libertas-sd8686-firmwarealmalinux 820240111-121.gitb3132c18.el8
libertas-sd8787-firmwarealmalinux 820240111-121.gitb3132c18.el8
libertas-usb8388-firmwarealmalinux 82:20240111-121.gitb3132c18.el8
libertas-usb8388-olpc-firmwarealmalinux 820240111-121.gitb3132c18.el8
linux-firmwarealmalinux 820240111-121.gitb3132c18.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-20592 iwl1000-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Secur... 8.2 0.0102 None reported
High CVE-2022-46329 iwl100-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Secur... 8.2 0.0028 None reported
Showing 1 to 2 of 2 1