From 576a48da95ec8d908f5bc168d8ac3adc0d2bde22f1dfdf8e5b9fed5bb19da3a5 Mon Sep 17 00:00:00 2001 From: Takashi Iwai Date: Thu, 4 Jan 2018 15:21:48 +0000 Subject: [PATCH 1/2] Accepting request 561654 from home:msmeissn:branches:Kernel:HEAD - Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715) OBS-URL: https://build.opensuse.org/request/show/561654 OBS-URL: https://build.opensuse.org/package/show/Kernel:HEAD/kernel-firmware?expand=0&rev=189 --- kernel-firmware.changes | 5 +++++ kernel-firmware.spec | 6 +++++- microcode_amd_fam17h.bin | Bin 0 -> 3252 bytes 3 files changed, 10 insertions(+), 1 deletion(-) create mode 100644 microcode_amd_fam17h.bin diff --git a/kernel-firmware.changes b/kernel-firmware.changes index 2098c3b..d22ddce 100644 --- a/kernel-firmware.changes +++ b/kernel-firmware.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Dec 25 16:38:52 UTC 2017 - meissner@suse.com + +- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715) + ------------------------------------------------------------------- Sat Dec 23 08:34:13 UTC 2017 - mpluskal@suse.com diff --git a/kernel-firmware.spec b/kernel-firmware.spec index 3377680..a8fe2fd 100644 --- a/kernel-firmware.spec +++ b/kernel-firmware.spec @@ -1,7 +1,7 @@ # # spec file for package kernel-firmware # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -38,6 +38,8 @@ Source8: ql2600_fw.bin Source9: ql2700_fw.bin Source10: ql8300_fw.bin Source99: %{name}-rpmlintrc +# CVE-2017-5715 +Source200: microcode_amd_fam17h.bin BuildRequires: fdupes BuildRequires: suse-module-tools Requires(post): coreutils @@ -102,6 +104,8 @@ sed -i "s|/usr/bin/python$|/usr/bin/python3|" ./check_whence.py mkdir -p %{buildroot}/lib/firmware cp -avf * %{buildroot}/lib/firmware rm -f %{buildroot}/lib/firmware/WHENCE +# CVE-2017-5715 fix +cp %{SOURCE200} %{buildroot}/lib/firmware/amd-ucode/ %fdupes %{buildroot} # In alsa-firmware rm -f %{buildroot}/lib/firmware/ctefx.bin diff --git a/microcode_amd_fam17h.bin b/microcode_amd_fam17h.bin new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..1ce229b421b4538d79e71d67a767a7aa0f2abb42d43e619f41079cd9df465cc4 GIT binary patch literal 3252 zcmb7F4Ny~87Cw2rkQaDL2nmo7;878xMnOj;W$6;-M`(3P6{#WuomGL^wy0DMEy}Bc zC<{fGR#1bDik4x-R;mtKUD3tGqSycq{-D6f>WEvbrL9_vvghVUC|g(e&cJy$_uTJ( z=Ra!pbRdhvKdB3k|E){P+rNgS06%#az=IP?-K4e`dvloo_yiXNt99!3?WVn^~^hfL8n_LNfU#`Bg)N%5I z1anv4l&_hV9?j0NQLW}z=XRLR58OEv@+2bu^sHQwakKZ6ZTGmtan%kd^f7t#s9(+` zG>)G6(W0s%*~g0Dy{*TO_m(ymz3vf~`}w()KSfTf@yhvR-;BGfR*v&r+c^U=*%B~rX**E?DAmf*{AO3wIS=mJ{&Mkd>C_J;_~Ls^hZS@;hD|R z<+o?f+0^bb`$@u`%7J+*wA6NT$OH$dBj3l3 z(9@zt-tLF{2OH~?2TCt&T9`Li^pM@#Tf_e)cAs`I`Rw|1W`pvzj8nHxCHWOJN)b0{&d)b!le2Us7f1)%A4;^|?(qqL{(-&Vk7C&@18@v%Nlm z1%>g78)iAF1yUbHiyK+NQZqX^sZ3nIdbikX>1d~40$Hc~>FI1&@N4YBDT~A>GIPX4 z|NmTku`yjyQ5Z-Ill2uqF^AlZK?VzkF%MWbiUNMjAz65qn&HPxm4|0lOHkszS|w3) zV3e9jE#nH1vGcVwFdWa$H-Lblrxw3%h^Ti60WNE^)Q!S|XVfw_6|p%kp*T+4mLEvd zQTmG3{J?zB=_}k&$AG`dG+EUG#E~P8kYY?ScCn$mATVFSWmQv-6yO_GGL|DaEebYO z3!p>kj}jMh{z^*0mU1qi*s~cWP3!_r4JB%ABFlizC@>|m6kNo2$y;(@{9#mp!E&Y& znCv*sB`W|51M_)PQ2jf2k26xH66EKJJP;2QtUi1(;%GkMXyOmKfZ+&Nyg%L3!pq9X z;vY8vlhJR+n>Jg4X7mtBpk-D& zI9Z9m7X6){z{U|i0y(SI-u9({0Y)ungO}kMO5$(bUW}g>ZTAQEZI0M=+!im4H^}k* ztyHWZ6e~@2xYwaC>vpLi)ERxJqD`0pR_dCWV514^=Y#ox((i%<%Owp#O$!`hLlQVnEp&3&sc z6Im%xpIUWDeaVdT4P-xD=YkW~sdltpSrKIL$NTP>*Y+6Lr2x|CZeJ2p$|M3t!;exM zN-@TyuIxI;oTT8&G5$QOHVoKw?Pqp*QY59Z-&pu>Tf)R*EtCBFP2ABgdgN~-_n3$D zc+A6foVuQKwelLNvr)vzh`ny<42M1f@CBix-@xi`k={0toTSD|RS=g_hC+nmX4USeGSaTe5 z)`E~x&$HI4<*ooT<9YY(zu)avywHc=`JxUTP_1ha7D;Rp^GGc(9-0OJPE`QofPIV1 z2Zr0vB0@ z9&Oh&cn4_hJ@`KQo%9xx&%3sA`GD`5Y|;fd8j6EF%_k|4tMrBwMN)W_$ACM2JJ` Date: Thu, 4 Jan 2018 15:43:04 +0000 Subject: [PATCH 2/2] Accepting request 561683 from home:pluskalm:branches:Kernel:HEAD - Update to version 20180104: * wl18xx: update firmware file 8.9.0.0.76 * wl127x/wl128x: update firmwares * rtlwifi: rtl8723de: Add firmware for new driver/device * linux-firmware: DMC firmware for cannonlake v1.07 OBS-URL: https://build.opensuse.org/request/show/561683 OBS-URL: https://build.opensuse.org/package/show/Kernel:HEAD/kernel-firmware?expand=0&rev=190 --- _servicedata | 2 +- kernel-firmware-20171221.tar.xz | 3 --- kernel-firmware-20180104.tar.xz | 3 +++ kernel-firmware.changes | 9 +++++++++ kernel-firmware.spec | 10 ++++------ 5 files changed, 17 insertions(+), 10 deletions(-) delete mode 100644 kernel-firmware-20171221.tar.xz create mode 100644 kernel-firmware-20180104.tar.xz diff --git a/_servicedata b/_servicedata index 86852e3..e4d0526 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git - 2567e092339cd3403d697dc2e0967c31b7acb989 \ No newline at end of file + 65b1c68c63f974d72610db38dfae49861117cae2 \ No newline at end of file diff --git a/kernel-firmware-20171221.tar.xz b/kernel-firmware-20171221.tar.xz deleted file mode 100644 index 734909c..0000000 --- a/kernel-firmware-20171221.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:e947ea8e35bdcd303703f7581eb7aabac680d08da7e28b067bca082fc9b9c8f3 -size 66619596 diff --git a/kernel-firmware-20180104.tar.xz b/kernel-firmware-20180104.tar.xz new file mode 100644 index 0000000..b1fcd22 --- /dev/null +++ b/kernel-firmware-20180104.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:202c05e844d16de1a0a507c931c62104bc265f4d11948651b6b255c167975265 +size 66634916 diff --git a/kernel-firmware.changes b/kernel-firmware.changes index d22ddce..fe806a0 100644 --- a/kernel-firmware.changes +++ b/kernel-firmware.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Thu Jan 4 15:39:35 UTC 2018 - mpluskal@suse.com + +- Update to version 20180104: + * wl18xx: update firmware file 8.9.0.0.76 + * wl127x/wl128x: update firmwares + * rtlwifi: rtl8723de: Add firmware for new driver/device + * linux-firmware: DMC firmware for cannonlake v1.07 + ------------------------------------------------------------------- Mon Dec 25 16:38:52 UTC 2017 - meissner@suse.com diff --git a/kernel-firmware.spec b/kernel-firmware.spec index a8fe2fd..e0d2aa3 100644 --- a/kernel-firmware.spec +++ b/kernel-firmware.spec @@ -17,15 +17,14 @@ %define __ksyms_path ^/lib/firmware -%define version_unconverted 20171221 - +%define version_unconverted 20180104 Name: kernel-firmware -Version: 20171221 +Version: 20180104 Release: 0 Summary: Linux kernel firmware files License: SUSE-Firmware AND GPL-2.0 AND GPL-2.0+ AND MIT Group: System/Kernel -Url: https://git.kernel.org/cgit/linux/kernel/git/firmware/linux-firmware.git/ +URL: https://git.kernel.org/cgit/linux/kernel/git/firmware/linux-firmware.git/ # Created with umask 022; cd /_tmp # After git clone https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git # cd linux-firmware @@ -73,7 +72,6 @@ Provides: ath3k-firmware Obsoletes: ath3k-firmware Provides: compat-wireless-firmware = 4.4 Obsoletes: compat-wireless-firmware < 4.4 -BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildArch: noarch %description @@ -95,7 +93,7 @@ This package contains the microcode files used by AMD CPUs. %setup -q cp %{SOURCE2} %{SOURCE8} %{SOURCE9} %{SOURCE10} . # change ./check_whence.py to be a python3 program -sed -i "s|/usr/bin/python$|/usr/bin/python3|" ./check_whence.py +sed -i "s|%{_bindir}/python$|%{_bindir}/python3|" ./check_whence.py %build # nothing to do