Received: by 2002:a25:c205:0:0:0:0:0 with SMTP id s5csp345199ybf; Wed, 26 Feb 2020 14:18:53 -0800 (PST) X-Google-Smtp-Source: APXvYqws9+qaiGENgpJ7p53zvh4uUmdQBQDFcuwSOS0JpafjVuFw/kEvHuXBZ5AC5YBBehCVmSR+ X-Received: by 2002:aca:388:: with SMTP id 130mr944662oid.89.1582755533512; Wed, 26 Feb 2020 14:18:53 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1582755533; cv=none; d=google.com; s=arc-20160816; b=Q+wIu96lWrEtOc9xoKCVWG8iIbwPT/roCMMQbhv3PVB/YmGaldTWEbSv4O4vrTnMLA Wmq1Tss4MWV9IUiD8oBkAiR0d69sEeZa4EbTeMUw5CQIFG3uh1x8LB1ZqjY0RWojbBL8 3tQRHOvbNYiHP5AAafS85NB66pRHXLZpcL/0gEpFfd+K624FCEEa+ttRFxLFCnCYev+A 8FGSr22+z2+2daVpbKl4g1T2penX1Uk5qjsCMb9X9B+Su1H15mWGADOqGBSneJGYvdi7 c/Hg/lf9w5BoKMEP3+iYsXbsoZ/9E71tfvUlOTV2MY514CCC4fKSJydlPyLUVq0O8dpK aIIA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding :content-language:mime-version:user-agent:date:message-id:cc:to :subject:from:dkim-signature; bh=adv2gMDHdJrSNT8UFFETSumaGBAQt4WCebanQKid9IU=; b=vOUKzIetOEWX8+gZospIc8S4lKDI9GpJVV05LxKa0/b+wbKH8T3xumxxEGlrReLh+6 T5l3xYRyrIi94CFbVszInYdjpfy7WPHfODB6Fn0Td0IC66npykIJov8eFk9/r5VdJstu zC4QuAiHJ5WAYqZqYRysF8D169ImVFY+6r8rNgIn7opgVwLh+v2s50pGQWS/Yq5qFYT0 MbuagOJiV4+RWl7bTVJJdYYN6KgAx7xyV3EA0yZfgrZU6jqhVCrxA0HSzdgz6vklWXNF rX54GQLzgRqywr2m+Fdh01gi53Lh1dHv4yF11Jx2iaUKLAIr+U5h9GkBc+68gvzV6P1R MY/A== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=UF7GZ0n1; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id e21si468032oti.124.2020.02.26.14.18.41; Wed, 26 Feb 2020 14:18:53 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=UF7GZ0n1; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727820AbgBZWQn (ORCPT + 99 others); Wed, 26 Feb 2020 17:16:43 -0500 Received: from us-smtp-delivery-1.mimecast.com ([207.211.31.120]:51597 "EHLO us-smtp-1.mimecast.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1727715AbgBZWQn (ORCPT ); Wed, 26 Feb 2020 17:16:43 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1582755402; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=adv2gMDHdJrSNT8UFFETSumaGBAQt4WCebanQKid9IU=; b=UF7GZ0n1Xz9E8U1XFr5pg5NJ85mz7zOf5kvFcVwVDNbjJSa17Yn91xuac4VLHYUE+g8zWp zHynoIvNUMOFrpviNgNEhAFmDheH6MuddT2TFJHNyw/KwLORBuGqeYwN9+/UK5++JD5mbF ewB4vYHZlOAs0sckW6JuCvOIx5gP9pk= Received: from mail-wr1-f70.google.com (mail-wr1-f70.google.com [209.85.221.70]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-207-C06umtVxPMyCySJwEmO88w-1; Wed, 26 Feb 2020 17:16:35 -0500 X-MC-Unique: C06umtVxPMyCySJwEmO88w-1 Received: by mail-wr1-f70.google.com with SMTP id p8so392743wrw.5 for ; Wed, 26 Feb 2020 14:16:35 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:subject:to:cc:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=adv2gMDHdJrSNT8UFFETSumaGBAQt4WCebanQKid9IU=; b=mDbtSSOcNghX3frbVS9m/WBhGMjwjQtKQJVG3iXjeBDhsayqEZpzmTKj22r+t5sKfx E/zbQ4PkfxASB3nX9zm8HSrxfIrQ0Qx87Aw0E5Vkh3JMkLdrNuoKWlH0DddFHd+nQFot g5J0zW3V5UNEl9lx22pCKzFvYRJY9mj3XybQ9EtlkmprN+CK9ifyFR4NMf2mir6UuMb0 vw3foDc0oBMMYAi9FkOH5Qrq6z8gwGc6niOC4rhPgittf8fE3Lzds8XuYPZ5kp/INOeN GHaTjAhJ9BnNCoMmAqvLCsemb/aJQoYIt+20KNspo0jdG+JvqD4GAgDoXaI/w0OARW+w Cx9g== X-Gm-Message-State: APjAAAV8D49ialL6TG/aDWLLfMO/O4aOv6vQkUiBAN2YFftyJOu6O5Fw xaIHiIJMYaLaKw/ughlE4rgLQEACAy09jL0SbPWYJh41zrdToYLZJMitygV6UrxQlpu5KGjzLsH ZIKhz3vLej17zgvjSmx04tfcl X-Received: by 2002:a1c:9a13:: with SMTP id c19mr987169wme.134.1582755394159; Wed, 26 Feb 2020 14:16:34 -0800 (PST) X-Received: by 2002:a1c:9a13:: with SMTP id c19mr987142wme.134.1582755393863; Wed, 26 Feb 2020 14:16:33 -0800 (PST) Received: from x1.localdomain (2001-1c00-0c0c-fe00-fc7e-fd47-85c1-1ab3.cable.dynamic.v6.ziggo.nl. [2001:1c00:c0c:fe00:fc7e:fd47:85c1:1ab3]) by smtp.gmail.com with ESMTPSA id b10sm4974284wrw.61.2020.02.26.14.16.32 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 26 Feb 2020 14:16:32 -0800 (PST) From: Hans de Goede Subject: Updating cypress/brcm firmware in linux-firmware for CVE-2019-15126 To: Chi-Hsien Lin , Chirjeev Singh , Chung-Hsien Hsu Cc: linux-firmware@kernel.org, Linux Kernel Mailing List Message-ID: <93dba8d2-6e46-9157-d292-4d93feb8ec1a@redhat.com> Date: Wed, 26 Feb 2020 23:16:32 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.5.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello Cypress people, Can we please get updated firmware for brcm/brcmfmac4356-pcie.bin and brcm/brcmfmac4356-sdio.bin fixing CVE-2019-15126 as well as for any other affected models (the 4356 is explicitly named in the CVE description) ? The current Cypress firmware files in linux-firmware are quite old, e.g. for brcm/brcmfmac4356-pcie.bin linux-firmware has: version 7.35.180.176 dated 2017-10-23, way before the CVE Where as https://community.cypress.com/docs/DOC-19000 / cypress-fmac-v4.14.77-2020_0115.zip has: version 7.35.180.197 which presumably contains a fix (no changelog) Regards, Hans