Public bug reported: Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.
Cypress (was Broadcom) have given the Raspberry Pi foundation new releases of the WiFi and Bluetooth firmware to fix the problem. See https://github.com/raspberrypi/linux/issues/1342#issuecomment-321221748 The pre-release files found at the above link are now included in the latest release of raspbian stretch. Would it be possible to include these new files in the linux-firmware package? Please note at the moment the package is missing the file brcmfmac43430-sdio.txt. Without this file the wifi does not work on the raspberry pi 3. ** Affects: linux-firmware (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1713276 Title: CVE-2017-9417 “Broadpwn” To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-firmware/+bug/1713276/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
