[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
** Changed in: linux-firmware-raspi2 (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
This bug was fixed in the package linux-firmware-raspi2 - 4-0ubuntu0~20.10.1 --- linux-firmware-raspi2 (4-0ubuntu0~20.10.1) groovy; urgency=medium * Pull in latest from hirsute (LP: #1925971) - Add aliases and diversions for brcmfmac43455 configuration on the Raspberry Pi Compute Module 4, and 400 (LP: #1912905) - Added diversions for all wifi firmware blobs (LP: #1918013) - New upstream boot firmware release, 1.20210303 - New upstream bluetooth firmware release, 1.2-4+rpt8 [ Phil Elwell ] - Second Spectra fix for CYW43455 (CVE-2020-10370) - Original firmware name: BCM4345C0_003.001.025.0174.0342.hcd - New upstream wifi firmware release, 1:20190114-1+rpt11 [ Serge Schneider ] - Update CYW43455 firmware - brcm/brcmfmac43455-sdio.bin 7.45.229 - See: https://github.com/raspberrypi/linux/issues/3849 -- William 'jawn-smith' Wilson Fri, 23 Apr 2021 16:05:55 -0500 ** Changed in: linux-firmware-raspi2 (Ubuntu Groovy) Status: Fix Committed => Fix Released ** Bug watch added: github.com/raspberrypi/linux/issues #3849 https://github.com/raspberrypi/linux/issues/3849 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-10370 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
This bug was fixed in the package linux-firmware-raspi2 - 4-0ubuntu0~20.04.1 --- linux-firmware-raspi2 (4-0ubuntu0~20.04.1) focal; urgency=medium * Backport to focal (LP: #1925971) - Add aliases and diversions for brcmfmac43455 configuration on the Raspberry Pi Compute Module 4, and 400 (LP: #1912905) - Added diversions for all wifi firmware blobs (LP: #1918013) - New upstream boot firmware release, 1.20210303 - New upstream bluetooth firmware release, 1.2-4+rpt8 [ Phil Elwell ] - Second Spectra fix for CYW43455 (CVE-2020-10370) - Original firmware name: BCM4345C0_003.001.025.0174.0342.hcd - New upstream wifi firmware release, 1:20190114-1+rpt11 [ Serge Schneider ] - Update CYW43455 firmware - brcm/brcmfmac43455-sdio.bin 7.45.229 - See: https://github.com/raspberrypi/linux/issues/3849 -- William 'jawn-smith' Wilson Fri, 23 Apr 2021 16:05:55 -0500 ** Changed in: linux-firmware-raspi2 (Ubuntu Focal) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
** Tags removed: verification-needed verification-needed-groovy ** Tags added: verification-done verification-done-groovy -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
The verification passed for Groovy. *** On Pi 400 ** ubuntu@ubuntu:~$ apt-cache policy pi-bluetooth linux-firmware-raspi2 pi-bluetooth: Installed: 0.1.15ubuntu1 Candidate: 0.1.15ubuntu1.1~20.10.1 Version table: 0.1.15ubuntu1.1~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-proposed/restricted arm64 Packages *** 0.1.15ubuntu1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy/restricted arm64 Packages 100 /var/lib/dpkg/status linux-firmware-raspi2: Installed: 3-0ubuntu2~20.10.1 Candidate: 4-0ubuntu0~20.10.1 Version table: 4-0ubuntu0~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-proposed/restricted arm64 Packages *** 3-0ubuntu2~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-updates/restricted arm64 Packages 100 /var/lib/dpkg/status 2-0ubuntu2 500 500 http://ports.ubuntu.com/ubuntu-ports groovy/restricted arm64 Packages ubuntu@ubuntu:~$ bluetoothctl Agent registered [bluetooth]# list [bluetooth]# devices No default controller available [bluetooth]# ubuntu@ubuntu:~$ apt-cache policy pi-bluetooth linux-firmware-raspi2 pi-bluetooth: Installed: 0.1.15ubuntu1.1~20.10.1 Candidate: 0.1.15ubuntu1.1~20.10.1 Version table: *** 0.1.15ubuntu1.1~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-proposed/restricted arm64 Packages 100 /var/lib/dpkg/status 0.1.15ubuntu1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy/restricted arm64 Packages linux-firmware-raspi2: Installed: 4-0ubuntu0~20.10.1 Candidate: 4-0ubuntu0~20.10.1 Version table: *** 4-0ubuntu0~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-proposed/restricted arm64 Packages 100 /var/lib/dpkg/status 3-0ubuntu2~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-updates/restricted arm64 Packages 2-0ubuntu2 500 500 http://ports.ubuntu.com/ubuntu-ports groovy/restricted arm64 Packages ubuntu@ubuntu:~$ bluetoothctl Agent registered [CHG] Controller DC:A6:32:F6:84:4E Pairable: yes [bluetooth]# devices [bluetooth]# list Controller DC:A6:32:F6:84:4E ubuntu [default] [bluetooth]# scan on Discovery started [CHG] Controller DC:A6:32:F6:84:4E Discovering: yes [NEW] Device 28:11:A5:D5:CB:47 LE-reserved_M [NEW] Device 28:11:A5:D5:AC:98 LE-Lemonade [NEW] Device E2:70:8C:88:51:C0 E2-70-8C-88-51-C0 [bluetooth]# * On CM4 ** ubuntu@ubuntu:~$ apt-cache policy pi-bluetooth linux-firmware-raspi2 pi-bluetooth: Installed: 0.1.15ubuntu1 Candidate: 0.1.15ubuntu1.1~20.10.1 Version table: 0.1.15ubuntu1.1~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-proposed/restricted arm64 Packages *** 0.1.15ubuntu1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy/restricted arm64 Packages 100 /var/lib/dpkg/status linux-firmware-raspi2: Installed: 3-0ubuntu2~20.10.1 Candidate: 4-0ubuntu0~20.10.1 Version table: 4-0ubuntu0~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-proposed/restricted arm64 Packages *** 3-0ubuntu2~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-updates/restricted arm64 Packages 100 /var/lib/dpkg/status 2-0ubuntu2 500 500 http://ports.ubuntu.com/ubuntu-ports groovy/restricted arm64 Packages ubuntu@ubuntu:~$ bluetoothctl Agent registered [bluetooth]# list [bluetooth]# devices No default controller available [bluetooth]# ubuntu@ubuntu:~$ !apt apt-cache policy pi-bluetooth linux-firmware-raspi2 pi-bluetooth: Installed: 0.1.15ubuntu1.1~20.10.1 Candidate: 0.1.15ubuntu1.1~20.10.1 Version table: *** 0.1.15ubuntu1.1~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-proposed/restricted arm64 Packages 100 /var/lib/dpkg/status 0.1.15ubuntu1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy/restricted arm64 Packages linux-firmware-raspi2: Installed: 4-0ubuntu0~20.10.1 Candidate: 4-0ubuntu0~20.10.1 Version table: *** 4-0ubuntu0~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-proposed/restricted arm64 Packages 100 /var/lib/dpkg/status 3-0ubuntu2~20.10.1 500 500 http://ports.ubuntu.com/ubuntu-ports groovy-updates/restricted arm64 Packages 2-0ubuntu2 500 500 http://ports.ubuntu.com/ubuntu-ports groovy/restricted arm64 Packages ubuntu@ubuntu:~$ bluetoothctl Agent registered [CHG] Controller DC:A6:32:FE:BA:B2 Pairable: yes [bluetooth]# devices [bluetooth]# list Controller DC:A6:32:FE:BA:B2 ubuntu [default] [bluetooth]# scan on Discovery started [CHG] Controller DC:A6:32:FE:BA:B2 Discovering: yes [NEW] Device 28:11:A5:D5:AC:98 LE-Lemonade [NEW] Device 28:11:A5:D5:CB:47 LE-reserved_M [bluetooth]# -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
** Tags added: verification-done-focal verification-needed verification- needed-groovy -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
The verification passed for focal. * On Pi 400 ** ubuntu@ubuntu:~$ apt-cache policy bluez pi-bluetooth linux-firmware-raspi2 bluez: Installed: 5.53-0ubuntu3 Candidate: 5.53-0ubuntu3.1 Version table: 5.53-0ubuntu3.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/main arm64 Packages *** 5.53-0ubuntu3 500 500 http://ports.ubuntu.com/ubuntu-ports focal/main arm64 Packages 100 /var/lib/dpkg/status pi-bluetooth: Installed: 0.1.10ubuntu6 Candidate: 0.1.15ubuntu0~20.04.1 Version table: 0.1.15ubuntu0~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/multiverse arm64 Packages *** 0.1.10ubuntu6 500 500 http://ports.ubuntu.com/ubuntu-ports focal/multiverse arm64 Packages 100 /var/lib/dpkg/status linux-firmware-raspi2: Installed: 3-0ubuntu2~20.04.1 Candidate: 4-0ubuntu0~20.04.1 Version table: 4-0ubuntu0~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/multiverse arm64 Packages *** 3-0ubuntu2~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-updates/multiverse arm64 Packages 100 /var/lib/dpkg/status 1.20200212-0ubuntu1 500 500 http://ports.ubuntu.com/ubuntu-ports focal/multiverse arm64 Packages ubuntu@ubuntu:~$ bluetoothctl devices No default controller available ubuntu@ubuntu:~$ apt-cache policy bluez pi-bluetooth linux-firmware-raspi2 bluez: Installed: 5.53-0ubuntu3.1 Candidate: 5.53-0ubuntu3.1 Version table: *** 5.53-0ubuntu3.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/main arm64 Packages 100 /var/lib/dpkg/status 5.53-0ubuntu3 500 500 http://ports.ubuntu.com/ubuntu-ports focal/main arm64 Packages pi-bluetooth: Installed: 0.1.15ubuntu0~20.04.1 Candidate: 0.1.15ubuntu0~20.04.1 Version table: *** 0.1.15ubuntu0~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/multiverse arm64 Packages 100 /var/lib/dpkg/status 0.1.10ubuntu6 500 500 http://ports.ubuntu.com/ubuntu-ports focal/multiverse arm64 Packages linux-firmware-raspi2: Installed: 4-0ubuntu0~20.04.1 Candidate: 4-0ubuntu0~20.04.1 Version table: *** 4-0ubuntu0~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/multiverse arm64 Packages 100 /var/lib/dpkg/status 3-0ubuntu2~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-updates/multiverse arm64 Packages 1.20200212-0ubuntu1 500 500 http://ports.ubuntu.com/ubuntu-ports focal/multiverse arm64 Packages ubuntu@ubuntu:~$ bluetoothctl Agent registered [CHG] Controller DC:A6:32:F6:84:4E Pairable: yes [bluetooth]# scan on Discovery started [CHG] Controller DC:A6:32:F6:84:4E Discovering: yes [NEW] Device 28:11:A5:D5:AC:98 28-11-A5-D5-AC-98 [NEW] Device 68:27:37:05:F4:ED [TV] Samsung 6 Series (55) [NEW] Device 5B:1B:6F:46:F3:00 5B-1B-6F-46-F3-00 [NEW] Device 28:11:A5:D5:CB:47 LE-reserved_M [NEW] Device 42:25:C8:1B:5F:D2 42-25-C8-1B-5F-D2 [NEW] Device 64:FF:0A:21:B1:70 64-FF-0A-21-B1-70 [CHG] Device 28:11:A5:D5:AC:98 RSSI: -62 [CHG] Device 28:11:A5:D5:AC:98 TxPower: 8 [CHG] Device 28:11:A5:D5:AC:98 Name: LE-Lemonade [CHG] Device 28:11:A5:D5:AC:98 Alias: LE-Lemonade [NEW] Device 4B:04:19:F1:60:90 4B-04-19-F1-60-90 [bluetooth]# ** On CM4 ** apt-cache policy bluez pi-bluetooth linux-firmware-raspi2 bluez: Installed: 5.53-0ubuntu3 Candidate: 5.53-0ubuntu3.1 Version table: 5.53-0ubuntu3.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/main arm64 Packages *** 5.53-0ubuntu3 500 500 http://ports.ubuntu.com/ubuntu-ports focal/main arm64 Packages 100 /var/lib/dpkg/status pi-bluetooth: Installed: 0.1.10ubuntu6 Candidate: 0.1.15ubuntu0~20.04.1 Version table: 0.1.15ubuntu0~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/multiverse arm64 Packages *** 0.1.10ubuntu6 500 500 http://ports.ubuntu.com/ubuntu-ports focal/multiverse arm64 Packages 100 /var/lib/dpkg/status linux-firmware-raspi2: Installed: 3-0ubuntu2~20.04.1 Candidate: 4-0ubuntu0~20.04.1 Version table: 4-0ubuntu0~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/multiverse arm64 Packages *** 3-0ubuntu2~20.04.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-updates/multiverse arm64 Packages 100 /var/lib/dpkg/status 1.20200212-0ubuntu1 500 500 http://ports.ubuntu.com/ubuntu-ports focal/multiverse arm64 Packages ubuntu@ubuntu:~$ bluetoothctl devices No default controller available ubuntu@ubuntu:~$ apt-cache policy bluez linux-firmware-raspi2 pi-bluetooth bluez: Installed: 5.53-0ubuntu3.1 Candidate: 5.53-0ubuntu3.1 Version table: *** 5.53-0ubuntu3.1 500 500 http://ports.ubuntu.com/ubuntu-ports focal-proposed/main arm64 Packages 100 /var/lib/dpkg/status 5.53-0ubuntu3 500 500
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
Hello William, or anyone else affected, Accepted linux-firmware-raspi2 into groovy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source /linux-firmware-raspi2/4-0ubuntu0~20.10.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- groovy to verification-done-groovy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-groovy. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: linux-firmware-raspi2 (Ubuntu Groovy) Status: New => Fix Committed ** Changed in: linux-firmware-raspi2 (Ubuntu Focal) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
** Also affects: linux-firmware-raspi2 (Ubuntu Focal) Importance: Undecided Status: New ** Also affects: linux-firmware-raspi2 (Ubuntu Groovy) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
** Description changed: - Hirsute has some patches that address CVEs and enable bluetooth/wifi on - the CM4 and 400. They need to be SRU'd to focal and groovy. + [Impact] + + Without these patches, Bluetooth is inoperable on the CM4 and Pi 400 + + [Test Case] + + * Boot the Ubuntu Desktop for Pi image on a CM4. + * Start the Settings application and switch to the Bluetooth tab + * Verify that Bluetooth is not enabled and attempting to activate it fails + * Repeat the above steps for the Pi 400 + + [Regression Potential] + + There are some diversions and other firmware updates that could + potentially cause issues. These have been tested on lots of different pi + hardware and no issues have been discovered. There is also an included + Spectra CVE fix which is very low risk. + + [Original Description] + Hirsute has some patches that address CVEs and enable bluetooth/wifi on the CM4 and 400. They need to be SRU'd to focal and groovy. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy
I've uploaded packages to https://launchpad.net/~jawn- smith/+archive/ubuntu/raspackages for both focal and groovy. They include changes to binary files so a normal debdiff wouldn't have worked. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925971 Title: SRU bluetooth fixes and CVEs to focal and groovy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
