MGASA-2018-0323

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2018-0323.html
Import Source
https://advisories.mageia.org/MGASA-2018-0323.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2018-0323
Related
Published
2018-07-25T08:24:17Z
Modified
2018-07-25T08:03:03Z
Summary
Updated nonfree firmware packages fixes security vulnerabilities
Details

This firmware update fixes the following security issues:

  • bcm4356, bcm4354, bcm43362, bcm43340, bcm43430:
    • dropping replayed M3 for offloaded 4-way handshake (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079)
    • dropping replayed G1 for offloaded GTK rekey (CVE-2017-13080, CVE-2017-13081)

Also in this update:

  • Updated bluethooth firmwares for Intel 7260, 7265, 8260
  • fixed firmware for Amd Vega10 VCE causing a hang
References
Credits

Affected packages

Mageia:6 / kernel-firmware-nonfree

Package

Name
kernel-firmware-nonfree
Purl
pkg:rpm/mageia/kernel-firmware-nonfree?arch=source&distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20180606-1.mga6.nonfree

Ecosystem specific 

{
    "section": "nonfree"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2018-0323.json"

Mageia:6 / radeon-firmware

Package

Name
radeon-firmware
Purl
pkg:rpm/mageia/radeon-firmware?arch=source&distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20180606-1.mga6.nonfree

Ecosystem specific 

{
    "section": "nonfree"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2018-0323.json"