RHSA-2024:7484: Low: SUSE Liberty Linux security update for linux-firmware

[Update Advisories for SUSE Liberty Linux]

# security update for linux-firmware

Announcement ID: RHSA-2024:7484
Rating: Low

Cross-References:

  * CVE-2023-20584
  * CVE-2023-31356



CVSS scores:

  * CVE-2023-20584 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
  * CVE-2023-20584 ( SUSE ): 4 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
  * CVE-2023-31356 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
  * CVE-2023-31356 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Products:

  * SUSE Liberty Linux 9


An update that solves 2 vulnerabilities can now be installed.

## Description:

This security update provides a functional equivalent of RHSA-2024:7484.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:7484.


## Package List:

  * SUSE Liberty Linux 9:
    * iwl100-firmware 39.31.5.1-143.3.el9_4
    * iwl1000-firmware 39.31.5.1-143.3.el9_4
    * iwl105-firmware 18.168.6.1-143.3.el9_4
    * iwl135-firmware 18.168.6.1-143.3.el9_4
    * iwl2000-firmware 18.168.6.1-143.3.el9_4
    * iwl2030-firmware 18.168.6.1-143.3.el9_4
    * iwl3160-firmware 25.30.13.0-143.3.el9_4
    * iwl5000-firmware 8.83.5.1_1-143.3.el9_4
    * iwl5150-firmware 8.24.2.2-143.3.el9_4
    * iwl6000g2a-firmware 18.168.6.1-143.3.el9_4
    * iwl6000g2b-firmware 18.168.6.1-143.3.el9_4
    * iwl6050-firmware 41.28.5.1-143.3.el9_4
    * iwl7260-firmware 25.30.13.0-143.3.el9_4
    * libertas-sd8787-firmware 20240905-143.3.el9_4
    * linux-firmware 20240905-143.3.el9_4
    * linux-firmware-whence 20240905-143.3.el9_4
    * netronome-firmware 20240905-143.3.el9_4

## References:

  * https://www.suse.com/security/cve/CVE-2023-20584.html
  * https://www.suse.com/security/cve/CVE-2023-31356.html