-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

====================================================================                   Red Hat Security Advisory

Synopsis:          Important: linux-firmware security update
Advisory ID:       RHSA-2022:7887-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:7887
Issue date:        2022-11-09
CVE Names:         CVE-2020-12321 
====================================================================
1. Summary:

An update for linux-firmware is now available for Red Hat Enterprise Linux
7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended
Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP
Solutions.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 7.7) - noarch
Red Hat Enterprise Linux Server E4S (v. 7.7) - noarch
Red Hat Enterprise Linux Server TUS (v. 7.7) - noarch

3. Description:

The linux-firmware packages contain all of the firmware files that are
required by various devices to operate.

Security Fix(es):

* hardware: buffer overflow in bluetooth firmware (CVE-2020-12321)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1893914 - CVE-2020-12321 hardware: buffer overflow in bluetooth firmware

6. Package List:

Red Hat Enterprise Linux Server AUS (v. 7.7):

Source:
linux-firmware-20190429-73.gitddde598.el7_7.src.rpm

noarch:
iwl100-firmware-39.31.5.1-73.el7_7.noarch.rpm
iwl1000-firmware-39.31.5.1-73.el7_7.noarch.rpm
iwl105-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl135-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl2000-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl2030-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl3160-firmware-22.0.7.0-73.el7_7.noarch.rpm
iwl3945-firmware-15.32.2.9-73.el7_7.noarch.rpm
iwl4965-firmware-228.61.2.24-73.el7_7.noarch.rpm
iwl5000-firmware-8.83.5.1_1-73.el7_7.noarch.rpm
iwl5150-firmware-8.24.2.2-73.el7_7.noarch.rpm
iwl6000-firmware-9.221.4.1-73.el7_7.noarch.rpm
iwl6000g2a-firmware-17.168.5.3-73.el7_7.noarch.rpm
iwl6000g2b-firmware-17.168.5.2-73.el7_7.noarch.rpm
iwl6050-firmware-41.28.5.1-73.el7_7.noarch.rpm
iwl7260-firmware-22.0.7.0-73.el7_7.noarch.rpm
iwl7265-firmware-22.0.7.0-73.el7_7.noarch.rpm
linux-firmware-20190429-73.gitddde598.el7_7.noarch.rpm

Red Hat Enterprise Linux Server E4S (v. 7.7):

Source:
linux-firmware-20190429-73.gitddde598.el7_7.src.rpm

noarch:
iwl100-firmware-39.31.5.1-73.el7_7.noarch.rpm
iwl1000-firmware-39.31.5.1-73.el7_7.noarch.rpm
iwl105-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl135-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl2000-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl2030-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl3160-firmware-22.0.7.0-73.el7_7.noarch.rpm
iwl3945-firmware-15.32.2.9-73.el7_7.noarch.rpm
iwl4965-firmware-228.61.2.24-73.el7_7.noarch.rpm
iwl5000-firmware-8.83.5.1_1-73.el7_7.noarch.rpm
iwl5150-firmware-8.24.2.2-73.el7_7.noarch.rpm
iwl6000-firmware-9.221.4.1-73.el7_7.noarch.rpm
iwl6000g2a-firmware-17.168.5.3-73.el7_7.noarch.rpm
iwl6000g2b-firmware-17.168.5.2-73.el7_7.noarch.rpm
iwl6050-firmware-41.28.5.1-73.el7_7.noarch.rpm
iwl7260-firmware-22.0.7.0-73.el7_7.noarch.rpm
iwl7265-firmware-22.0.7.0-73.el7_7.noarch.rpm
linux-firmware-20190429-73.gitddde598.el7_7.noarch.rpm

Red Hat Enterprise Linux Server TUS (v. 7.7):

Source:
linux-firmware-20190429-73.gitddde598.el7_7.src.rpm

noarch:
iwl100-firmware-39.31.5.1-73.el7_7.noarch.rpm
iwl1000-firmware-39.31.5.1-73.el7_7.noarch.rpm
iwl105-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl135-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl2000-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl2030-firmware-18.168.6.1-73.el7_7.noarch.rpm
iwl3160-firmware-22.0.7.0-73.el7_7.noarch.rpm
iwl3945-firmware-15.32.2.9-73.el7_7.noarch.rpm
iwl4965-firmware-228.61.2.24-73.el7_7.noarch.rpm
iwl5000-firmware-8.83.5.1_1-73.el7_7.noarch.rpm
iwl5150-firmware-8.24.2.2-73.el7_7.noarch.rpm
iwl6000-firmware-9.221.4.1-73.el7_7.noarch.rpm
iwl6000g2a-firmware-17.168.5.3-73.el7_7.noarch.rpm
iwl6000g2b-firmware-17.168.5.2-73.el7_7.noarch.rpm
iwl6050-firmware-41.28.5.1-73.el7_7.noarch.rpm
iwl7260-firmware-22.0.7.0-73.el7_7.noarch.rpm
iwl7265-firmware-22.0.7.0-73.el7_7.noarch.rpm
linux-firmware-20190429-73.gitddde598.el7_7.noarch.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2020-12321
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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W/2L
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://listman.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2022-7887:01 Important: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Ente...

Summary

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.
Security Fix(es):
* hardware: buffer overflow in bluetooth firmware (CVE-2020-12321)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Summary


Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258

References

https://access.redhat.com/security/cve/CVE-2020-12321 https://access.redhat.com/security/updates/classification/#important

Package List

Red Hat Enterprise Linux Server AUS (v. 7.7):
Source: linux-firmware-20190429-73.gitddde598.el7_7.src.rpm
noarch: iwl100-firmware-39.31.5.1-73.el7_7.noarch.rpm iwl1000-firmware-39.31.5.1-73.el7_7.noarch.rpm iwl105-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl135-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl2000-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl2030-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl3160-firmware-22.0.7.0-73.el7_7.noarch.rpm iwl3945-firmware-15.32.2.9-73.el7_7.noarch.rpm iwl4965-firmware-228.61.2.24-73.el7_7.noarch.rpm iwl5000-firmware-8.83.5.1_1-73.el7_7.noarch.rpm iwl5150-firmware-8.24.2.2-73.el7_7.noarch.rpm iwl6000-firmware-9.221.4.1-73.el7_7.noarch.rpm iwl6000g2a-firmware-17.168.5.3-73.el7_7.noarch.rpm iwl6000g2b-firmware-17.168.5.2-73.el7_7.noarch.rpm iwl6050-firmware-41.28.5.1-73.el7_7.noarch.rpm iwl7260-firmware-22.0.7.0-73.el7_7.noarch.rpm iwl7265-firmware-22.0.7.0-73.el7_7.noarch.rpm linux-firmware-20190429-73.gitddde598.el7_7.noarch.rpm
Red Hat Enterprise Linux Server E4S (v. 7.7):
Source: linux-firmware-20190429-73.gitddde598.el7_7.src.rpm
noarch: iwl100-firmware-39.31.5.1-73.el7_7.noarch.rpm iwl1000-firmware-39.31.5.1-73.el7_7.noarch.rpm iwl105-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl135-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl2000-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl2030-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl3160-firmware-22.0.7.0-73.el7_7.noarch.rpm iwl3945-firmware-15.32.2.9-73.el7_7.noarch.rpm iwl4965-firmware-228.61.2.24-73.el7_7.noarch.rpm iwl5000-firmware-8.83.5.1_1-73.el7_7.noarch.rpm iwl5150-firmware-8.24.2.2-73.el7_7.noarch.rpm iwl6000-firmware-9.221.4.1-73.el7_7.noarch.rpm iwl6000g2a-firmware-17.168.5.3-73.el7_7.noarch.rpm iwl6000g2b-firmware-17.168.5.2-73.el7_7.noarch.rpm iwl6050-firmware-41.28.5.1-73.el7_7.noarch.rpm iwl7260-firmware-22.0.7.0-73.el7_7.noarch.rpm iwl7265-firmware-22.0.7.0-73.el7_7.noarch.rpm linux-firmware-20190429-73.gitddde598.el7_7.noarch.rpm
Red Hat Enterprise Linux Server TUS (v. 7.7):
Source: linux-firmware-20190429-73.gitddde598.el7_7.src.rpm
noarch: iwl100-firmware-39.31.5.1-73.el7_7.noarch.rpm iwl1000-firmware-39.31.5.1-73.el7_7.noarch.rpm iwl105-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl135-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl2000-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl2030-firmware-18.168.6.1-73.el7_7.noarch.rpm iwl3160-firmware-22.0.7.0-73.el7_7.noarch.rpm iwl3945-firmware-15.32.2.9-73.el7_7.noarch.rpm iwl4965-firmware-228.61.2.24-73.el7_7.noarch.rpm iwl5000-firmware-8.83.5.1_1-73.el7_7.noarch.rpm iwl5150-firmware-8.24.2.2-73.el7_7.noarch.rpm iwl6000-firmware-9.221.4.1-73.el7_7.noarch.rpm iwl6000g2a-firmware-17.168.5.3-73.el7_7.noarch.rpm iwl6000g2b-firmware-17.168.5.2-73.el7_7.noarch.rpm iwl6050-firmware-41.28.5.1-73.el7_7.noarch.rpm iwl7260-firmware-22.0.7.0-73.el7_7.noarch.rpm iwl7265-firmware-22.0.7.0-73.el7_7.noarch.rpm linux-firmware-20190429-73.gitddde598.el7_7.noarch.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Severity
Advisory ID: RHSA-2022:7887-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:7887
Issued Date: : 2022-11-09
CVE Names: CVE-2020-12321

Topic

An update for linux-firmware is now available for Red Hat Enterprise Linux7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco ExtendedUpdate Support, and Red Hat Enterprise Linux 7.7 Update Services for SAPSolutions.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.


Topic


 

Relevant Releases Architectures

Red Hat Enterprise Linux Server AUS (v. 7.7) - noarch

Red Hat Enterprise Linux Server E4S (v. 7.7) - noarch

Red Hat Enterprise Linux Server TUS (v. 7.7) - noarch


Bugs Fixed

1893914 - CVE-2020-12321 hardware: buffer overflow in bluetooth firmware


Related News

Linux Mint 22: Elevating Security and Usability for Admins
3 - 5 min read
Linux Mint has has long been recognized as a versatile and user-friendly distribution and has earned great popularity among administrators and
Exim 4.98 Addresses Critical Vulnerabilities, Bolsters Email Server Security
2 - 4 min read
Exim is one of Unix-like systems' most widely used mail transfer agents. It's essential for email delivery and handling and is a significant part of
Recent OpenSSH RCE Bug Explained: Impact & Mitigations
2 - 4 min read
In an era where cybersecurity threats loom larger than ever, the discovery of a Remote Code Execution (RCE) vulnerability in OpenSSH by Qualys’
CVE-2024-4577: A Swiftly Weaponized Vulnerability for Ransomware Distribution
2 - 4 min read
Security researchers recently issued an update detailing how attackers are exploiting a PHP code execution vulnerability to spread TellYouThePass
Play Ransomware Group Unleashes New Threat on ESXi Environments: Analysis & Mitigation Strategies
3 - 5 min read
The Play ransomware group, well-known for its double-extortion tactics, recently unveiled a Linux variant targeting ESXi environments. This
Critical Linux Kernel Vulnerabilities Patched in Ubuntu Azure Systems
2 - 4 min read
Canonical has fixed several recently identified critical Linux kernel vulnerabilities in July 2024. These vulnerabilities primarily affect Microsoft
The Urgent Need for Secure Software Development: New Report Serves as a Wake-Up Call for the Industry
3 - 5 min read
The Linux Foundation and Open Source Security Foundation recently published a report entitled "Secure Software Development Education 2024
Severe Linux Kernel Privilege Escalation Bugs Could Compromise Entire Systems
2 - 4 min read
The Cybersecurity and Infrastructure Security Agency (CISA) recently added a new Linux kernel privilege escalation bug ( CVE-2024-1086 ) to its

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved