Bug 1758571
| Summary: | [rhel-7.6.z] Update Intel microcode version to microcode-20190918 | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | RAD team bot copy to z-stream <autobot-eus-copy> |
| Component: | microcode_ctl | Assignee: | Eugene Syromiatnikov <esyr> |
| Status: | CLOSED ERRATA | QA Contact: | Jeff Bastian <jbastian> |
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 7.7 | CC: | esyr, mthacker, skozina |
| Target Milestone: | rc | Keywords: | ZStream |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | microcode_ctl-2.1-47.6.el7_6 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1753541 | Environment: | |
| Last Closed: | 2019-10-16 09:48:06 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1753541 | ||
| Bug Blocks: | |||
|
Description
RAD team bot copy to z-stream
2019-10-04 14:17:08 UTC
Verified with microcode_ctl-2.1-47.7.el7_6 First do a comparison with rpmdiff against the RHEL-7.8 version (see bug 1753541 for test results) and verify the microcode data are the same (excluding timestamp and documentation differences): $ rpmdiff microcode_ctl-2.1-47.7.el7_6.x86_64.rpm \ microcode_ctl-2.1-55.el7.x86_64.rpm | grep -v -F -e '..........T' -e '/usr/share/man' removed PROVIDES microcode_ctl(x86-64) = 2:2.1-47.7.el7_6 added PROVIDES microcode_ctl(x86-64) = 2:2.1-55.el7 S.5.......T /usr/sbin/intel-microcode2ucode Next run a sanity check on a system: [root@dell-pet3420-01 ~]# rpm -q microcode_ctl microcode_ctl-2.1-47.7.el7_6.x86_64 [root@dell-pet3420-01 ~]# lscpu | egrep -i -e family -e model -e stepping CPU family: 6 Model: 158 Model name: Intel(R) Core(TM) i3-7100 CPU @ 3.90GHz Stepping: 9 [root@dell-pet3420-01 ~]# uname -r 3.10.0-957.35.2.el7.x86_64 [root@dell-pet3420-01 ~]# cat /sys/devices/system/cpu/cpu0/microcode/version 0xb4 [root@dell-pet3420-01 ~]# journalctl -b0 -o short-monotonic | sed "s/$(hostname) //" | grep -i microcode | grep -v dracut [ 0.000000] kernel: microcode: microcode updated early to revision 0xb4, date = 2019-04-01 [ 7.499867] kernel: microcode: sig=0x906e9, pf=0x2, revision=0xb4 [ 7.503614] kernel: microcode: Microcode Update Driver: v2.01 <tigran.co.uk>, Peter Oruba [ 7.581069] kernel: mce: [Hardware Error]: PROCESSOR 0:906e9 TIME 1570634920 SOCKET 0 APIC 0 microcode b4 [ 7.581072] kernel: mce: [Hardware Error]: PROCESSOR 0:906e9 TIME 1570634920 SOCKET 0 APIC 0 microcode b4 [ 16.869728] systemd[1]: Starting Load CPU microcode update... [ 18.083539] systemd[1]: Started Load CPU microcode update. [root@dell-pet3420-01 ~]# cd /sys/devices/system/cpu/vulnerabilities [root@dell-pet3420-01 vulnerabilities]# grep . * | sed 's/:/^/' | column -t -s^ l1tf Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT disabled mds Mitigation: Clear CPU buffers; SMT disabled meltdown Mitigation: PTI spec_store_bypass Mitigation: Speculative Store Bypass disabled via prctl and seccomp spectre_v1 Mitigation: Load fences, __user pointer sanitization spectre_v2 Mitigation: IBRS (kernel), IBPB (In reply to Jeff Bastian from comment #3) > Next run a sanity check on a system: Oops, forgot the Beaker job for the sanity check: https://beaker.engineering.redhat.com/recipes/7451750#tasks Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2019:3111 |