A linux-firmware security update has been released for Fedora 38.

[SECURITY] Fedora 38 Update: linux-firmware-20230919-1.fc38

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-4056a5c165
2023-09-23 01:30:04.876758
--------------------------------------------------------------------------------

Name : linux-firmware
Product : Fedora 38
Version : 20230919
Release : 1.fc38
URL : http://www.kernel.org/
Summary : Firmware files used by the Linux kernel
Description :
This package includes firmware files required for some devices to
operate.

--------------------------------------------------------------------------------
Update Information:

Update to upstream 20230919 release: * amd-ucode: Add note on fam19h warnings *
i915: update MTL HuC to version 8.5.4 * amdgpu: update DMCUB to 0.0.183.0 for
various AMDGPU ASICs * qcom: add link to sc8280xp audioreach firmware * qcom:
sm8250: add RB5 sensors DSP firmware * qcom: Update vpu-1.0 firmware * qcom:
sm8250: update DSP firmware * qcom: add firmware for the onboard WiFi on qcm2290
/ qrb4210 * qcom: add venus firmware files for v6.0 * qcom: add firmware for
QRB4210 platforms * qcom: add firmware for QCM2290 platforms * qcom: add GPU
firmware for QCM2290 / QRB2210 * ath10k/WCN3990: move wlanmdsp to qcom/sdm845 *
QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605 * Fix carl9170fw shell
scripts for shellcheck errors * i915: Update MTL DMC to v2.16 * Update firmware
file for Intel Bluetooth AX200/AX201/AX203/AX210/AX211 * Update firmware for
qat_4xxx devices * Update AMD SEV firmware * rtw89: 8852b: update fw to
v0.29.29.3 * rtw89: 8851b: update fw to v0.29.41.2 * i915: add GSC 102.0.0.1655
for MTL * cirrus: Add CS35L41 firmware for HP G11 models * Update AMD cpu
microcode * rtl_bt: Add firmware v2 file for RTL8852C * Revert "rtl_bt: Update
RTL8852C BT USB firmware to 0x040D_7225" * cxgb4: Update firmware to revision
1.27.4.0
--------------------------------------------------------------------------------
ChangeLog:

* Tue Sep 19 2023 Peter Robinson [pbrobinson@fedoraproject.org] - 20230919-1
- Update to upstream 20230919 release
- amd-ucode: Add note on fam19h warnings
- i915: update MTL HuC to version 8.5.4
- amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
- qcom: add link to sc8280xp audioreach firmware
- qcom: sm8250: add RB5 sensors DSP firmware
- qcom: Update vpu-1.0 firmware
- qcom: sm8250: update DSP firmware
- qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
- qcom: add venus firmware files for v6.0
- qcom: add firmware for QRB4210 platforms
- qcom: add firmware for QCM2290 platforms
- qcom: add GPU firmware for QCM2290 / QRB2210
- ath10k/WCN3990: move wlanmdsp to qcom/sdm845
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
- Fix carl9170fw shell scripts for shellcheck errors
- i915: Update MTL DMC to v2.16
- Update firmware file for Intel Bluetooth AX200/AX201/AX203/AX210/AX211
- Update firmware for qat_4xxx devices
- Update AMD SEV firmware
- rtw89: 8852b: update fw to v0.29.29.3
- rtw89: 8851b: update fw to v0.29.41.2
- i915: add GSC 102.0.0.1655 for MTL
- cirrus: Add CS35L41 firmware for HP G11 models
- Update AMD cpu microcode
- rtl_bt: Add firmware v2 file for RTL8852C
- Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
- cxgb4: Update firmware to revision 1.27.4.0
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2239141 - TRIAGE-CVE-2022-27635 linux-firmware: Improper access control for some Intel(R) PROSet/Wireless WiFi [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2239141
[ 2 ] Bug #2239142 - TRIAGE-CVE-2022-46329 linux-firmware: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2239142
[ 3 ] Bug #2239143 - TRIAGE-CVE-2022-40964 linux-firmware: Improper access control for some Intel(R) PROSet/Wireless WiFi [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2239143
[ 4 ] Bug #2239144 - TRIAGE-CVE-2022-36351 linux-firmware: Improper input validation in some Intel(R) PROSet/Wireless WiFi [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2239144
[ 5 ] Bug #2239145 - TRIAGE-CVE-2022-38076 linux-firmware: Improper input validation in some Intel(R) PROSet/Wireless WiFi [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2239145
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-4056a5c165' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------