This kernel-linus update is based on upstream 5.10.62 and fixes atleast the following security issues: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a . MGASA-2021-0419 - Updated kernel-linus packages fix security vulnerabilities Publication date: 08 Sep 2021 URL: https://advisories.mageia.org/MGASA-2021-0419.html Type: security Affected Mageia releases: 8 CVE: CVE-2020-3702, CVE-2021-3739, CVE-2021-3743, CVE-2021-3753 This kernel-linus update is based on upstream 5.10.62 and fixes atleast the following security issues: Specifically timed and handcrafted traffic can cause internal errorsin a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic in ath9k (CVE-2020-3702). A process with CAP_SYS_ADMIN can cause a kernel NULL pointer dereference in btrfs code (CVE-2021-3739). there is an out-of-bound read bug in qrtr_endpoint_post in net/qrtr/qrtr.c (CVE-2021-3743). An out-of-bounds read due to a race condition has been found in the Linux kernel due to write access to vc_mode is not protected by a lock in vt_ioctl (KDSETMDE) (CVE-2021-3753). For other upstream fixes, see the referenced changelogs. References: - https://bugs.mageia.org/show_bug.cgi?id=29436 - https://www.cve.org/CVERecord?id=CVE-2020-3702 - https://www.cve.org/CVERecord?id=CVE-2021-3739 - https://www.cve.org/CVERecord?id=CVE-2021-3743 - https://www.cve.org/CVERecord?id=CVE-2021-3753 SRPMS: - 8/core/kernel-linus-5.10.62-1.mga8 . The latest kernel-linus release resolves significant vulnerabilities in Mageia, specifically related to Wi-Fi security protocols and overall system reliability.. Mageia Security, Kernel Update, Wi-Fi Encryption Issues. . LinuxSecurity.com Team
Updated nonfree firmwares fixees various issues, adds new / improved hardware support and fixes atleast the following security issue: An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to . MGASA-2021-0103 - Updated nonfree firmware packages fix security vulnerability Publication date: 04 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0103.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-15126 Updated nonfree firmwares fixees various issues, adds new / improved hardware support and fixes atleast the following security issue: An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (CVE-2019-15126). Full list of updates: * kernel-firmware-nonfree: - add firmware for Lontium LT9611UXC DSI to HDMI bridge - brcm: Add NVRAM for Vamrs 96boards Rock960 - brcm: make AP6212 in bananpi m2 plus/zero work - brcm: Link RPi4's WiFi firmware with DMI machine name - brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes - brcm: remove old brcm firmwares that have newer cypress variants (CVE-2019-15126) - cypress: Link the new cypress firmware to the old brcm files (CVE-2019-15126) - i915: Add GuC firmware v49.0.1 for all platforms - i915: Add GuC v49.0.1 for DG1 - i915: Add HuC v7.7.1 for DG1 - i915: Add DMC v2.01 for ADL-S - mediatek: update MT8173 VPU firmware to v1.1.6 - mediatek: add firmware for MT7921 - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304 - QCA : Updated firmware files for WCN3991 - qcom: add firmware files for Adreno a650 - qcom: Add SM8250 Audio DSP firmware - qcom: Add SM8250 Compute DSP firmware - qcom: Add venus firmware files for VPU-1.0 * iwlwifi-firmware: - Updatefirmware for Intel Bluetooth 9260, 9560 to 22.20.0.3 - Update firmware for Intel Bluetooth AX200, AX201, AX210 to 22.30.0.4 * rtlwifi-firmware: - rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644 - rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253 - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB - rtl_bt: Add firmware and config files for RTL8852A BT USB chip - rtw88: RTL8821C: Update firmware to v24.8 (for rfe type 2 support) - rtw88: RTL8822C: Update normal firmware to v9.9.5 (performance fixes) - rtw89: 8852a: add firmware v0.9.12.2 * radeon-firmware: - amdgpu: add initial firmware for green sardine References: - https://bugs.mageia.org/show_bug.cgi?id=28475 - https://www.cve.org/CVERecord?id=CVE-2019-15126 SRPMS: - 7/nonfree/kernel-firmware-nonfree-20210223-1.mga7.nonfree - 7/nonfree/radeon-firmware-20210211-1.mga7.nonfree . Explore the newest Mageia security bulletin focused on severe Wi-Fi encryption vulnerabilities alongside essential firmware enhancements.. Mageia Firmware Update, Wi-Fi Security Fix, Internal Errors. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.