Accepting request 561654 from home:msmeissn:branches:Kernel:HEAD

- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)

OBS-URL: https://build.opensuse.org/request/show/561654
OBS-URL: https://build.opensuse.org/package/show/Kernel:HEAD/kernel-firmware?expand=0&rev=189

kernel-firmware.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Dec 25 16:38:52 UTC 2017 - meissner@suse.com
+
+- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)
+
 -------------------------------------------------------------------
 Sat Dec 23 08:34:13 UTC 2017 - mpluskal@suse.com
 

kernel-firmware.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package kernel-firmware
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -38,6 +38,8 @@ Source8:        ql2600_fw.bin
 Source9:        ql2700_fw.bin
 Source10:       ql8300_fw.bin
 Source99:       %{name}-rpmlintrc
+# CVE-2017-5715
+Source200:      microcode_amd_fam17h.bin
 BuildRequires:  fdupes
 BuildRequires:  suse-module-tools
 Requires(post): coreutils
@@ -102,6 +104,8 @@ sed -i "s|/usr/bin/python$|/usr/bin/python3|" ./check_whence.py
 mkdir -p %{buildroot}/lib/firmware
 cp -avf * %{buildroot}/lib/firmware
 rm -f %{buildroot}/lib/firmware/WHENCE
+# CVE-2017-5715 fix
+cp %{SOURCE200} %{buildroot}/lib/firmware/amd-ucode/
 %fdupes %{buildroot}
 # In alsa-firmware
 rm -f %{buildroot}/lib/firmware/ctefx.bin