公告ID(KYSA-202407-1094)
公告ID:KYSA-202407-1094
公告摘要:linux-firmware安全漏洞
等級:Important
發(fā)布日期:2024-07-23
詳細(xì)介紹
1.修復(fù)的CVE
·CVE-2022-27635
描述:PROSet/Wireless WiFi Software是一款無線網(wǎng)卡驅(qū)動程序。
PROSet/Wireless WiFi and Killer(TM) WiFi存在安全漏洞,該漏洞源于訪問控制不當(dāng)。攻擊者利用該漏洞可以提升權(quán)限。
·CVE-2022-36351
描述:PROSet/Wireless WiFi Software是一款無線網(wǎng)卡驅(qū)動程序。
PROSet/Wireless WiFi and Killer(TM) WiFi存在安全漏洞,該漏洞源于輸入驗(yàn)證不正確。攻擊者利用該漏洞導(dǎo)致系統(tǒng)拒絕服務(wù)。
·CVE-2022-38076
描述:PROSet/Wireless WiFi Software是一款無線網(wǎng)卡驅(qū)動程序。
PROSet/Wireless WiFi and Killer(TM) WiFi存在安全漏洞,該漏洞源于輸入驗(yàn)證不正確。攻擊者利用該漏洞可以提升權(quán)限。
·CVE-2022-40964
描述:PROSet/Wireless WiFi Software是一款無線網(wǎng)卡驅(qū)動程序。
PROSet/Wireless WiFi and Killer(TM) WiFi存在安全漏洞,該漏洞源于訪問控制不當(dāng)。攻擊者利用該漏洞可以提升權(quán)限。
·CVE-2022-46329
描述:PROSet/Wireless WiFi Software是一款無線網(wǎng)卡驅(qū)動程序。
PROSet/Wireless WiFi Software 存在安全漏洞,該漏洞源于保護(hù)機(jī)制出現(xiàn)故障。攻擊者利用該漏洞可以提升權(quán)限。
2.受影響的軟件包
·中標(biāo)麒麟高級服務(wù)器操作系統(tǒng) V7
·aarch64架構(gòu):
libertas-usb8388-olpc-firmware、iwl1000-firmware、libertas-usb8388-firmware、iwl5150-firmware、iwl2000-firmware、iwl100-firmware、linux-firmware、iwl3160-firmware、iwl5000-firmware、iwl7260-firmware、iwl105-firmware、iwl6000g2a-firmware、iwl6050-firmware、iwl2030-firmware、libertas-sd8686-firmware、iwl6000g2b-firmware、iwl3945-firmware、iwl4965-firmware、libertas-sd8787-firmware、iwl6000-firmware、iwl135-firmware
·x86_64架構(gòu):
libertas-usb8388-olpc-firmware、iwl1000-firmware、libertas-usb8388-firmware、iwl5150-firmware、iwl2000-firmware、iwl100-firmware、linux-firmware、iwl3160-firmware、iwl5000-firmware、iwl7260-firmware、iwl105-firmware、iwl6000g2a-firmware、iwl6050-firmware、iwl2030-firmware、libertas-sd8686-firmware、iwl6000g2b-firmware、iwl3945-firmware、iwl4965-firmware、libertas-sd8787-firmware、iwl6000-firmware、iwl135-firmware
3.軟件包修復(fù)版本
·中標(biāo)麒麟高級服務(wù)器操作系統(tǒng) V7 (aarch64、x86_64)
libertas-usb8388-firmware-20201218-102.git05789708.el7.ns7.03或以上版本
iwl1000-firmware-39.31.5.1-102.el7.1.ns7.03或以上版本
iwl100-firmware-39.31.5.1-102.el7.1.ns7.03或以上版本
iwl5000-firmware-8.83.5.1_1-102.el7.1.ns7.03或以上版本
libertas-usb8388-olpc-firmware-20201218-102.git05789708.el7.ns7.03或以上版本
iwl4965-firmware-228.61.2.24-102.el7.1.ns7.03或以上版本
iwl105-firmware-18.168.6.1-102.el7.1.ns7.03或以上版本
iwl3160-firmware-25.30.13.0-102.el7.1.ns7.03或以上版本
iwl7260-firmware-25.30.13.0-102.el7.1.ns7.03或以上版本
iwl3945-firmware-15.32.2.9-102.el7.1.ns7.03或以上版本
iwl5150-firmware-8.24.2.2-102.el7.1.ns7.03或以上版本
iwl6000g2b-firmware-18.168.6.1-102.el7.1.ns7.03或以上版本
iwl2000-firmware-18.168.6.1-102.el7.1.ns7.03或以上版本
iwl135-firmware-18.168.6.1-102.el7.1.ns7.03或以上版本
iwl6000-firmware-9.221.4.1-102.el7.1.ns7.03或以上版本
iwl2030-firmware-18.168.6.1-102.el7.1.ns7.03或以上版本
linux-firmware-20201218-102.git05789708.el7.ns7.03或以上版本
libertas-sd8686-firmware-20201218-102.git05789708.el7.ns7.03或以上版本
iwl6000g2a-firmware-18.168.6.1-102.el7.1.ns7.03或以上版本
libertas-sd8787-firmware-20201218-102.git05789708.el7.ns7.03或以上版本
iwl6050-firmware-41.28.5.1-102.el7.1.ns7.03或以上版本
4.修復(fù)方法
方法一:配置源進(jìn)行升級安裝
1.打開軟件包源配置文件,根據(jù)倉庫地址進(jìn)行修改。
倉庫源地址:
中標(biāo)麒麟高級服務(wù)器操作系統(tǒng) V7
aarch64:https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/
x86_64:https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/
2.配置完成后執(zhí)行更新命令進(jìn)行升級,命令如下:
yum update Packagename
方法二:下載安裝包進(jìn)行升級安裝
通過軟件包地址下載軟件包,使用軟件包升級命令根據(jù)受影響的軟件包
列表進(jìn)行升級安裝, 命令如下:
yum install Packagename
3.升級完成后是否需要重啟服務(wù)或操作系統(tǒng):
CVE-2022-27635:無需重啟操作系統(tǒng)與服務(wù)即可使漏洞修復(fù)生效。
CVE-2022-36351:無需重啟操作系統(tǒng)與服務(wù)即可使漏洞修復(fù)生效。
CVE-2022-38076:無需重啟操作系統(tǒng)與服務(wù)即可使漏洞修復(fù)生效。
CVE-2022-40964:無需重啟操作系統(tǒng)與服務(wù)即可使漏洞修復(fù)生效。
CVE-2022-46329:無需重啟操作系統(tǒng)與服務(wù)即可使漏洞修復(fù)生效。
5.軟件包下載地址
·中標(biāo)麒麟高級服務(wù)器操作系統(tǒng) V7
linux-firmware(aarch64)軟件包下載地址:
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/libertas-usb8388-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl3945-firmware-15.32.2.9-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl3160-firmware-25.30.13.0-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl105-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl100-firmware-39.31.5.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl1000-firmware-39.31.5.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl2030-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl135-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl2000-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/libertas-sd8787-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl6000g2b-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl5000-firmware-8.83.5.1_1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl4965-firmware-228.61.2.24-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl6000g2a-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl5150-firmware-8.24.2.2-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl6000-firmware-9.221.4.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl6050-firmware-41.28.5.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/libertas-sd8686-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/iwl7260-firmware-25.30.13.0-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/libertas-usb8388-olpc-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/aarch64/Packages/linux-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
linux-firmware(x86_64)軟件包下載地址:
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/libertas-usb8388-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/libertas-sd8787-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/libertas-sd8686-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl135-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl3945-firmware-15.32.2.9-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl105-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl100-firmware-39.31.5.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl1000-firmware-39.31.5.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl3160-firmware-25.30.13.0-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl2030-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl2000-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl6000-firmware-9.221.4.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl7260-firmware-25.30.13.0-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl5150-firmware-8.24.2.2-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl4965-firmware-228.61.2.24-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl5000-firmware-8.83.5.1_1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl6050-firmware-41.28.5.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl6000g2b-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/iwl6000g2a-firmware-18.168.6.1-102.el7.1.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/linux-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
https://update.cs2c.com.cn/NS/V7/V7Update9/os/adv/lic/updates/x86_64/Packages/libertas-usb8388-olpc-firmware-20201218-102.git05789708.el7.ns7.03.noarch.rpm
注:其他相關(guān)依賴包請到相同目錄下載
6.修復(fù)驗(yàn)證
使用軟件包查詢命令,查看相關(guān)軟件包版本是否與修復(fù)版本一致,如果版本一致,則說明修復(fù)成功。
sudo rpm -qa | grep Packagename