Bug 1758568
| Summary: | [rhel-7.3.z] Update Intel microcode version to microcode-20190918 | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | RAD team bot copy to z-stream <autobot-eus-copy> |
| Component: | microcode_ctl | Assignee: | Eugene Syromiatnikov <esyr> |
| Status: | CLOSED ERRATA | QA Contact: | Jeff Bastian <jbastian> |
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 7.7 | CC: | esyr, mthacker, skozina |
| Target Milestone: | rc | Keywords: | ZStream |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | microcode_ctl-2.1-16.25.el7_3 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1753541 | Environment: | |
| Last Closed: | 2019-10-16 09:32:10 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1753541 | ||
| Bug Blocks: | |||
|
Description
RAD team bot copy to z-stream
2019-10-04 14:16:30 UTC
Verified with microcode_ctl-2.1-16.26.el7_3 First do a comparison with rpmdiff against the RHEL-7.8 version (see bug 1753541 for test results) and verify the microcode data are the same (excluding timestamp and documentation differences): $ rpmdiff microcode_ctl-2.1-16.26.el7_3.x86_64.rpm \ microcode_ctl-2.1-55.el7.x86_64.rpm | grep -v -F -e '..........T' -e '/usr/share/man' removed PROVIDES microcode_ctl(x86-64) = 2:2.1-16.26.el7_3 added PROVIDES microcode_ctl(x86-64) = 2:2.1-55.el7 S.5.......T /usr/sbin/intel-microcode2ucode Next run a sanity check on a system: https://beaker.engineering.redhat.com/recipes/7451753#tasks [root@intel-chiefriver-04 ~]# rpm -q microcode_ctl microcode_ctl-2.1-16.26.el7_3.x86_64 [root@intel-chiefriver-04 ~]# lscpu | egrep -i -e family -e model -e stepping CPU family: 6 Model: 58 Model name: Intel(R) Core(TM) i7-3720QM CPU @ 2.60GHz Stepping: 9 [root@intel-chiefriver-04 ~]# uname -r 3.10.0-514.69.1.el7.x86_64 [root@intel-chiefriver-04 ~]# cat /sys/devices/system/cpu/cpu0/microcode/version 0x21 [root@intel-chiefriver-04 ~]# journalctl -b0 -o short-monotonic | sed "s/$(hostname) //" | grep -i microcode | grep -v dracut [ 0.000000] kernel: microcode: microcode updated early to revision 0x21, date = 2019-02-13 [ 3.524692] kernel: microcode: CPU0 sig=0x306a9, pf=0x10, revision=0x21 [ 3.530606] kernel: microcode: CPU1 sig=0x306a9, pf=0x10, revision=0x21 [ 3.536508] kernel: microcode: CPU2 sig=0x306a9, pf=0x10, revision=0x21 [ 3.548581] kernel: microcode: CPU3 sig=0x306a9, pf=0x10, revision=0x21 [ 3.548589] kernel: microcode: CPU4 sig=0x306a9, pf=0x10, revision=0x21 [ 3.548593] kernel: microcode: CPU5 sig=0x306a9, pf=0x10, revision=0x21 [ 3.548597] kernel: microcode: CPU6 sig=0x306a9, pf=0x10, revision=0x21 [ 3.548600] kernel: microcode: CPU7 sig=0x306a9, pf=0x10, revision=0x21 [ 3.548650] kernel: microcode: Microcode Update Driver: v2.01 <tigran.co.uk>, Peter Oruba [ 12.757356] systemd[1]: Starting Load CPU microcode update... [ 12.831452] systemd[1]: Started Load CPU microcode update. [root@intel-chiefriver-04 ~]# cd /sys/devices/system/cpu/vulnerabilities [root@intel-chiefriver-04 vulnerabilities]# grep . * | sed 's/:/^/' | column -t -s^ l1tf Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable mds Mitigation: Clear CPU buffers; SMT vulnerable meltdown Mitigation: PTI spec_store_bypass Mitigation: Speculative Store Bypass disabled via prctl and seccomp spectre_v1 Mitigation: Load fences, usercopy/swapgs barriers and __user pointer sanitization spectre_v2 Mitigation: Full retpoline, IBPB Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2019:3121 |