| Summary: | Update request: microcode-0.20180703-1.mga6.nonfree | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Thomas Backlund <tmb> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, fri, jim, sysadmin-bugs, tarazed25 |
| Version: | 6 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | mga6-64-ok, mga6-32-ok | ||
| Source RPM: | microcode | CVE: | |
| Status comment: | |||
| Bug Depends on: | |||
| Bug Blocks: | 23315 | ||
|
Description
Thomas Backlund
2018-07-17 13:04:35 CEST
Already in use on Mageia infra, my own server, workstation and laptop Installed on this system: Kernel: 4.14.50-desktop-2.mga6 x86_64 Quad core Intel Core i7-4790 (-HT-MCP-) speed/max: 3834/4000 MHz desktop Mobo: MSI model: Z97-G43 (MS-7816) v: 3.0 Graphics: Card: NVIDIA GM204 [GeForce GTX 970] RAM: 32 GB Rebooted. $ sudo journalctl -xb | grep microcode Jul 17 16:15:47 difda kernel: microcode: microcode updated early to revision 0x24, date = 2018-01-21 Jul 17 16:15:47 difda kernel: microcode: sig=0x306c3, pf=0x2, revision=0x24 Jul 17 16:15:47 difda kernel: microcode: Microcode Update Driver: v2.2. $ rpm -qa | grep microcode microcode_ctl-2.1-7.mga6 microcode-0.20180703-1.mga6.nonfree CC:
(none) =>
tarazed25 Updated microcode and rebooted OK. Actually before installing the new kernel. Running Mate on: System: Host: vega Kernel: 4.14.56-desktop-1.mga6 x86_64 CPU: Quad core Intel Core i7-4790K (-HT-MCP-) speed/max: 4399/4400 MHz Graphics: NVIDIA GK104 [GeForce GTX 770] All looks OK.
Thomas Backlund
2018-07-18 00:45:07 CEST
Blocks:
(none) =>
23315 Two machines updated to all updates in all updates_testing repos 64 bit OK on my workstation: i7-2600K, Nvidia GTX750 (GM107) using proprietary driver GeForce 420 and later, BOINC, LVM on LUKS on SSD, no wifi. 2) 64 bit OK on laptop Thinkpad T60, CPU core2Duo T5600, ati RV515/M54 X1400, wifi AR5418. Resume from suspend and hibernation *) OK except wifi need to be reconnected manually :/ (regression) *) using Fn+F4 and Fn+F12 respectively - Somehow the Plasma battery icon have gone missing and logout menu do not contain suspend nor hibernate any longer! CC:
(none) =>
fri Real MBR hardware, Athlon X2, 8GB, nvidia 9800GT video, Atheros wifi. 64-bit Plasma system, using the server kernel. Updated microcode, nonfree firmware, and server kernel in one operation. Packages all installed cleanly. Rebooted, tried all the usual suspects, no regressions noted. CC:
(none) =>
andrewsfarm Real hardware, HP 6550b, i3,8GB, Intel graphics, Intel wifi, 64-bit Plasma system, using the desktop kernel. Performed the same tests as in Comment 5, with the same results. Also OK for mga6-64 on an nvidia system https://bugs.mageia.org/show_bug.cgi?id=23315#c9 System: Host: markab Kernel: 4.14.50-desktop-2.mga6 x86_64
CPU: Quad core Intel Core i7-5700HQ (-HT-MCP-) speed/max: 2695/3500 MHz
Mobo: GIGABYTE model: X5
Graphics: Card-1: NVIDIA GM204M [GeForce GTX 965M]
GLX Version: 4.6.0 NVIDIA 390.59
Updated microcode and latest firmware.
Rebooted fine. No problems evident.
OK for mga6-32 https://bugs.mageia.org/show_bug.cgi?id=23315#c11 Real hardware, Dell Inspiron 5100, P4, 1GB RAM, Radeon 7500 graphics, old Atheros wifi. Running 32-bit Plasma, using the VESA video driver because the radeon driver won't work with Plasma on this system. Updated microcodes, nonfree firmware, and the desktop kernel all in one operation. Packages all installed cleanly. Reboot successful, no regressions noted. Tested OK on Mageia 6 x86_64, system described in bug 23316 comment 7.
Advisory (added to svn):
type: security
subject: Updated microcode packages fix security vulnerability
CVE:
- CVE-2018-3639
- CVE-2018-3640
src:
6:
nonfree:
- microcode-0.20180703-1.mga6.nonfree
description: |
This microcode update provides the first set of fixes for Speculative Store
Bypass (SSBD, Spectre v4, CVE-2018-3639) and Rogue System Register Read
(RSRE, Spectre v3a, CVE-2018-3640) for Intel Sandybridge server, Ivy Bridge
server, Haswell server, Skylake server, Broadwell server, a few HEDT Core
i7/i9 models.
Included is also an AMD cpu microcode fix for family 15h Processor Revision
ID 0x00610f01 missed in the MGASA-2018-0260 update.
references:
- https://bugs.mageia.org/show_bug.cgi?id=23313Keywords:
(none) =>
advisory Enough tests, validating Keywords:
(none) =>
validated_update An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2018-0322.html Status:
NEW =>
RESOLVED |