Linux · Security advisory · May 22, 2024

RHSA-2024:3178: Security update for 21 packages

RHSA-2024:3178, released May 22, 2024, fixes 2 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0102
63rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
iwl100-firmwareRHEL 80:39.31.5.1-121.el8.1
iwl1000-firmwareRHEL 81:39.31.5.1-121.el8.1
iwl105-firmwareRHEL 80:18.168.6.1-121.el8.1
iwl135-firmwareRHEL 80:18.168.6.1-121.el8.1
iwl2000-firmwareRHEL 80:18.168.6.1-121.el8.1
iwl2030-firmwareRHEL 80:18.168.6.1-121.el8.1
iwl3160-firmwareRHEL 81:25.30.13.0-121.el8.1
iwl3945-firmwareRHEL 80:15.32.2.9-121.el8.1
iwl4965-firmwareRHEL 80:228.61.2.24-121.el8.1
iwl5000-firmwareRHEL 80:8.83.5.1_1-121.el8.1
iwl5150-firmwareRHEL 80:8.24.2.2-121.el8.1
iwl6000-firmwareRHEL 80:9.221.4.1-121.el8.1
iwl6000g2a-firmwareRHEL 80:18.168.6.1-121.el8.1
iwl6000g2b-firmwareRHEL 80:18.168.6.1-121.el8.1
iwl6050-firmwareRHEL 80:41.28.5.1-121.el8.1
iwl7260-firmwareRHEL 81:25.30.13.0-121.el8.1
libertas-sd8686-firmwareRHEL 80:20240111-121.gitb3132c18.el8
libertas-sd8787-firmwareRHEL 80:20240111-121.gitb3132c18.el8
libertas-usb8388-firmwareRHEL 82:20240111-121.gitb3132c18.el8
libertas-usb8388-olpc-firmwareRHEL 80:20240111-121.gitb3132c18.el8
linux-firmwareRHEL 80:20240111-121.gitb3132c18.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-20592 iwl1000-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Secur... 8.2 0.0102 None reported
High CVE-2022-46329 iwl100-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Secur... 8.2 0.0028 None reported
Showing 1 to 2 of 2 1