openSUSE has issued an advisory today (November 30): https://lists.opensuse.org/opensuse-updates/2017-11/msg00096.html It sounds like we may need to update some firmware due to KRACK.
Yep, I already have them in testing as part of updates for switching to 4.14 series kernels... I'll list them shortly...
Meaning its already fixed in cauldron
Version: Cauldron => 6
Note to testers, this update needs to go out before or at the same time as the 4.14 series kernel rollout. Also, to test this, install the firmwares, recreate the initrd with "dracut -f" and reboot and check that your hw still works Advisory: Updated nonfree firmwares fixes security issues Updated nonfree firmwares fixes atleast the following security issues: Broadcom firmware fixes: - dropping BRCM proprietary packets received over the air (CVE-2016-0801) - adding length checks for TDLS action frames (CVE-2017-0561) - adding length checks for WME IE (CVE-2017-9417) Iwlwifi firmware fixes: - The reinstallation of the Group Temporal key could be used for replay attacks (CVE-2017-13080) - The reinstallation of the Integrity Group Temporal key could be used for replay attacks (CVE-2017-13081) This update also add new and updated firmwares for various hardware supported by the 4.14 series kernels. SRPMS: kernel-firmware-nonfree-20171206-1.mga6.nonfree.src.rpm radeon-firmware-20171205-1.mga6.nonfree.src.rpm i586: kernel-firmware-nonfree-20171206-1.mga6.nonfree.noarch.rpm iwlwifi-firmware-20171206-1.mga6.nonfree.noarch.rpm radeon-firmware-20171205-1.mga6.nonfree.noarch.rpm ralink-firmware-20171206-1.mga6.nonfree.noarch.rpm rtlwifi-firmware-20171206-1.mga6.nonfree.noarch.rpm x86_64: kernel-firmware-nonfree-20171206-1.mga6.nonfree.noarch.rpm iwlwifi-firmware-20171206-1.mga6.nonfree.noarch.rpm ralink-firmware-20171206-1.mga6.nonfree.noarch.rpm rtlwifi-firmware-20171206-1.mga6.nonfree.noarch.rpm radeon-firmware-20171205-1.mga6.nonfree.noarch.rpm
Assignee: tmb => qa-bugs
on mga6-64 uname -r 4.9.56-desktop-1.mga6 packages installed cleanly: - iwlwifi-firmware-20171206-1.mga6.nonfree.noarch - kernel-firmware-nonfree-20171206-1.mga6.nonfree.noarch - radeon-firmware-20171205-1.mga6.nonfree.noarch - ralink-firmware-20171206-1.mga6.nonfree.noarch - rtlwifi-firmware-20171206-1.mga6.nonfree.noarch executed dracut -f rebooted no regressions noted OK for mga6-64 on this system However, I have no wifi devices and so this needs to be tested by those who do. Dell product: Precision Tower 3620 Mobo: Dell model: 09WH54 Card: Intel HD Graphics 530 CPU: Quad core Intel Core i7-6700 (-HT-MCP-) PC-BIOS (legacy) boot GPT partitions
CC: (none) => jim
There is an iwlwifi-agn-ucode package in testing. Is that supposed to be part of this update?
(In reply to James Kerr from comment #5) > There is an iwlwifi-agn-ucode package in testing. Is that supposed to be > part of this update? nope, it's replaced by iwlwifi-firmware, but I forgot to nuke it from the mirrors... (In reply to James Kerr from comment #4) > > However, I have no wifi devices and so this needs to be tested by those who > do. > Yeah, but you have this one that also got an update :) : > Card: Intel HD Graphics 530 Having said that, I've tested it on intel 7265 and 8265 wifi and it still works..
CC: (none) => tmb
$ inxi -b System: Host: vega Kernel: 4.9.56-1.mga6 x86_64 (64 bit) Desktop: MATE 1.18.0 Distro: Mageia 6 mga6 Machine: Device: desktop Mobo: Gigabyte model: G1.Sniper Z97 v: x.x UEFI: American Megatrends v: F6 date: 05/30/2014 CPU: Quad core Intel Core i7-4790K (-HT-MCP-) speed/max: 4399/4400 MHz Graphics: Card-1: Intel Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller Card-2: NVIDIA GK104 [GeForce GTX 770] Display Server: Mageia X.org 119.5 drivers: nvidia,v4l,intel Resolution: 2560x1440, 1024x768 GLX Renderer: GeForce GTX 770/PCIe/SSE2 GLX Version: 4.5.0 NVIDIA 384.98 Network: Card-1: Qualcomm Atheros Killer E220x Gigabit Ethernet Controller driver: alx Card-2: Ralink RT3090 Wireless 802.11n 1T/1R PCIe driver: rt2800pci Drives: HDD Total Size: 4892.9GB (49.0% used) Info: Processes: 307 Uptime: 1 min Memory: 1000.2/15722.4MB Client: Shell (bash) inxi: 2.3.11 Ran the updates and rebooted the machine. Everything running fine.
CC: (none) => tarazed25
$ inxi -b System: Host: difda Kernel: 4.9.56-desktop-1.mga6 x86_64 (64 bit) Desktop: MATE 1.18.0 Distro: Mageia 6 mga6 Machine: Device: desktop Mobo: MSI model: Z97-G43 (MS-7816) v: 3.0 UEFI: American Megatrends v: V17.8 date: 12/24/2014 CPU: Quad core Intel Core i7-4790 (-HT-MCP-) speed/max: 3863/4000 MHz Graphics: Card: NVIDIA GM204 [GeForce GTX 970] Display Server: Mageia X.org 119.5 drivers: nvidia,v4l Resolution: 3840x2160@60.00hz GLX Renderer: GeForce GTX 970/PCIe/SSE2 GLX Version: 4.5.0 NVIDIA 384.98 Network: Card: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller driver: r8169 Drives: HDD Total Size: 3740.8GB (20.1% used) Info: Processes: 245 Uptime: 6 min Memory: 900.3/32126.7MB Client: Shell (bash) inxi: 2.3.11 Ran the updates and rebooted without issue. Everything running fine so far.
$ inxi -b System: Host: hamal Kernel: 4.9.56-desktop-1.mga6 x86_64 (64 bit) Desktop: MATE 1.18.0 Distro: Mageia 6 mga6 Machine: Device: laptop System: Dell product: XPS 13 9360 Mobo: Dell model: 06CC14 v: A00 UEFI: Dell v: 1.3.2 date: 01/18/2017 Battery BAT0: charge: 68.3 Wh 86.6% condition: 78.9/78.9 Wh (100%) CPU: Dual core Intel Core i7-7500U (-HT-MCP-) speed/max: 3499/3500 MHz Graphics: Card: Intel HD Graphics 620 Display Server: Mageia X.org 119.5 driver: N/A Resolution: 3200x1800@59.98hz GLX Renderer: Mesa DRI Intel HD Graphics 620 (Kaby Lake GT2) GLX Version: 3.0 Mesa 17.1.5 Network: Card-1: Qualcomm Atheros QCA6174 802.11ac Wireless Network Adapter driver: ath10k_pci Card-2: Atheros Drives: HDD Total Size: NA (-) Info: Processes: 282 Uptime: 1 min Memory: 1128.6/15933.5MB Client: Shell (bash) inxi: 2.3.11 Updated the firmware files, rebooted and all is running smoothly.
Re comment 9: 16 GB RAM, 3 partitions on 1TB nvme drive.
Blocks: (none) => 22166
System: Host: canopus Kernel: 4.9.56-desktop-1.mga6 x86_64 (64 bit) Desktop: MATE 1.18.0 Distro: Mageia 6 mga6 Machine: Device: portable System: Dell product: MXG071 Mobo: Dell model: 0KX412 BIOS: Dell v: A06 date: 02/04/2008 Network: Card-1: Broadcom Limited NetXtreme BCM5754M Gigabit Ethernet PCI Express driver: tg3 Card-2: Intel PRO/Wireless 3945ABG [Golan] Network Connection driver: iwl3945 Rebooted OK after the updates and networking is running fine including ssh and network shares.
System: Host: hamal Kernel: 4.9.56-desktop-1.mga6 x86_64 (64 bit) Desktop: MATE 1.18.0 Distro: Mageia 6 mga6 Machine: Device: laptop System: Dell product: XPS 13 9360 Mobo: Dell model: 06CC14 v: A00 Network: Card-1: Qualcomm Atheros QCA6174 802.11ac Wireless Network Adapter driver: ath10k_pci Card-2: Atheros No problem with installation. $ dracut -f # ll initrd* -rw------- 1 root root 9259528 Dec 12 11:17 initrd-4.9.56-desktop-1.mga6.img After reboot wifi was up and working, NFS shares in place. $ rpm -qa | grep 20171206 rtlwifi-firmware-20171206-1.mga6.nonfree iwlwifi-firmware-20171206-1.mga6.nonfree ralink-firmware-20171206-1.mga6.nonfree kernel-firmware-nonfree-20171206-1.mga6.nonfree
Installed these packages and all others associated with the desktop kernel 4.14.5 update on a 64-bit system on my HP Probook 6550b. (i3, 8GB, Intel graphics, Intel wifi) The idea was to simulate a user getting thes updates all at once. All packages installed cleanly, and everything seems to be functioning as it should. Common apps (Firefox, GIMP, vlc) all work.
CC: (none) => andrewsfarm
System: Host: markab Kernel: 4.9.56-desktop-1.mga6 x86_64 (64 bit) Desktop: MATE 1.18.0 Distro: Mageia 6 mga6 Network: Card-1: Qualcomm Atheros Killer E220x Gigabit Ethernet Controller driver: alx Card-2: Intel Wireless 7265 driver: iwlwifi Aorus Machine: Device: laptop System: GIGABYTE product: X5 Mobo: GIGABYTE model: X5 Updated the firmware. $ dracut -f Everything seemed to be running fine after reboot. $ ll /boot/initrd* -rw------- 1 root root 8733059 Dec 12 14:23 /boot/initrd-4.9.56-desktop-1.mga6.img
After installing the new nvidia340 driver, I updated the firmware and all other appropriate packages related to the 4.14.5 server kernel update, on 64-bit and 32-bit systems on the same hardware: ASRock motherboard, AMD Athlon X2 7750 processor, 8GB RAM, nvidia 9800GT graphics, Atheros AR9485 wifi adapter. And, I executed the "dracut -f" command on each system. After the reboot, both systems seemed to be running fine. No regressions noted.
4.9.56-desktop-1.mga6 :: x86_64 Updates: - cpupower-4.14.4-1.mga6.x86_64 - dkms-virtualbox-5.2.2-1.mga6.noarch - kernel-desktop-4.14.4-1.mga6-1-1.mga6.x86_64 - kernel-desktop-devel-4.14.4-1.mga6-1-1.mga6.x86_64 - kernel-desktop-devel-latest-4.14.4-1.mga6.x86_64 - kernel-desktop-latest-4.14.4-1.mga6.x86_64 - kernel-doc-4.14.4-1.mga6.noarch - kernel-source-4.14.4-1.mga6-1-1.mga6.noarch - kernel-source-latest-4.14.4-1.mga6.noarch - kernel-userspace-headers-4.14.4-1.mga6.x86_64 - perf-4.14.4-1.mga6.x86_64 $ sudo urpmi cpupower-devel $ drakboot --boot $ reboot Rebooted to working desktop. System: Host: difda Kernel: 4.14.4-desktop-1.mga6 x86_64 (64 bit) Desktop: MATE 1.18.0 Distro: Mageia 6 mga6 CPU: Quad core Intel Core i7-4790 (-HT-MCP-) speed/max: 3599/4000 MHz RAM: 31.37 GB Network: Card: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller driver: r8169 NFS shares OK. Ran stress tests and hit problems. The cpu and memory tests ran fine but the disk read/write test failed to terminate and could not be killed from the commandline. The io tests also failed to terminate. Had to logout and reboot. Tried $ stress -d 1 -t 10 and that failed to terminate. Killed the process but it respawned immediately. By watching the process id it could be seen that the process did terminate but then respawned with another pid. The firmware packages had already been updated.
Oh my lord - posted on he wrong bug.
# uname -a Linux localhost 4.9.56-desktop-1.mga6 #1 SMP Thu Oct 12 22:55:31 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux RS780L [Radeon 3000] AMD Athlon(tm) II X3 450 Processor AR8151 v2.0 Gigabit Ethernet The following 3 packages are going to be installed: - iwlwifi-firmware-20171206-1.mga6.nonfree.noarch - kernel-firmware-nonfree-20171206-1.mga6.nonfree.noarch - radeon-firmware-20171205-1.mga6.nonfree.noarch dracut -f rebooted no issues
CC: (none) => brtians1
The srpms are now: SRPMS: kernel-firmware-nonfree-20171220-1.mga6.nonfree.src.rpm radeon-firmware-20171205-1.mga6.nonfree.src.rpm The only change is in the kernel-firmware-nonfree package: - nvidia: add GP108 signed firmware wich means we can support GTX1030 with free driver and kernel 4.14 so the already done tests are still valid
Updated advisory added to svn: subject: Updated nonfree firmwares fixes security issues and adds new hw support CVE: - CVE-2016-0801 - CVE-2017-0561 - CVE-2017-9417 - CVE-2017-13080 - CVE-2017-13081 src: 6: nonfree: - kernel-firmware-nonfree-20171220-1.mga6.nonfree - radeon-firmware-20171205-1.mga6.nonfree description: | Updated nonfree firmwares fixes atleast the following security issues: Broadcom firmware fixes: - dropping BRCM proprietary packets received over the air (CVE-2016-0801) - adding length checks for TDLS action frames (CVE-2017-0561) - adding length checks for WME IE (CVE-2017-9417) Iwlwifi firmware fixes: - The reinstallation of the Group Temporal key could be used for replay attacks (CVE-2017-13080) - The reinstallation of the Integrity Group Temporal key could be used for replay attacks (CVE-2017-13081) This update also adds updated firmwares: * ath10k, cxgb4, liquidio, mrvl, ql2400, ql2500, wilc1000 * Amd Polaris10-12, Intel BXT/SKL/KBL/CNL and new firmwares: * Amd Vega10 and Raven * Cavium nitrox * Intel CNL/GLK, IPU3, JeffersonPeak, ThunderPeak * Mellanox Spectrum * nVidia GP108 (GTX1030) * Qualcom Adreno &Venus, imx SDMA, * Realtek rtl8822be in order to support new hardware supported by 4.14 series kernels.
Keywords: (none) => advisory
Blocks: (none) => 22268
Blocks: (none) => 22269
No regression for me on x86_64, i3-2330M , BCM4313
M6/64 real EFI hardware with Radeon HD7310 graphics. *No* wifi. Kernel 4.14.5-tmb-desktop-1.mga6esktop (also normal desktop kernel). kernel-firmware-nonfree-20171220-1.mga6.nonfree iwlwifi-firmware-20171220-1.mga6.nonfree ralink-firmware-20171220-1.mga6.nonfree rtlwifi-firmware-20171220-1.mga6.nonfree radeon-firmware-20171205-1.mga6.nonfree Note that the first four are more recent than shown in comment 3 (20171206), in line with comment 19 (20171220). Have been running with these for some time, no problems. @tmb : Most good tests have been with earlier version of these pkgs. Are we allowed to OK them for 64-bit?
CC: (none) => lewyssmith
(In reply to Lewis Smith from comment #22) > > @tmb : Most good tests have been with earlier version of these pkgs. Are we > allowed to OK them for 64-bit? Yes, as stated in comment 19, the only change between 20171206 and 20171220 is: adding this: - nvidia: add GP108 signed firmware that adds support for nVidia GTX1030 series hw, something we didn't have firmware for before...
No problems encountered while testing the kernel updates. Validating the update. I've completed my testing of the kernel updates (all kernels, both arches) on real hardware. Will test the kernel updates under vb shortly.
Whiteboard: (none) => MGA6-64-OK MGA6-32-OKKeywords: (none) => validated_updateCC: (none) => davidwhodgins, sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2017-0472.html
Status: NEW => RESOLVEDResolution: (none) => FIXED