This bug was fixed in the package linux-firmware - 1.169.1

---------------
linux-firmware (1.169.1) artful; urgency=medium

  * CVE-2017-13080 and CVE-2017-13081 (LP: #1728762)
    - iwlwifi: update firmwares for 3160, 3168, 7265D, 8000C and 8265
    - iwlwifi: update firmwares for 3160, 3168, 7260, 7265 and 7265D

  * a300_[pfp|pm4].fw clashes when installing linux-firmware (LP: #1728908)
    - Add linux-firmware-snapdragon to Breaks: and Replaces:

 -- Seth Forshee <seth.fors...@canonical.com>  Wed, 15 Nov 2017 15:47:00
-0600

** Changed in: linux-firmware (Ubuntu Artful)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-firmware in Ubuntu.
https://bugs.launchpad.net/bugs/1728762

Title:
  Update iwlwifi firmware for 3160, 3168, 7260, 7265 and 7265D

Status in intel:
  Incomplete
Status in linux-firmware package in Ubuntu:
  Fix Released
Status in linux-firmware source package in Trusty:
  Fix Released
Status in linux-firmware source package in Xenial:
  Fix Released
Status in linux-firmware source package in Zesty:
  Fix Released
Status in linux-firmware source package in Artful:
  Fix Released
Status in linux-firmware source package in Bionic:
  Fix Released

Bug description:
  SRU Justification

  Impact: Intel wireless firmware WoWLAN functionality is vulnerable to
  some CVEs from the KRACK attack vulnerabilities, CVE-2017-13080 and
  CVE-2017-13081.

  Fix: Updated firmware from Intel containing fixes for these
  vulnerabilities.

  Test Case: Difficult to test; we are reliant on testing done by Intel.

  Regression Potential: There is always some possibility for regressions
  with firmware updates, but as these are bug fix updates the regression
  potential is minimal. I have been using the 7260 firmware for over a
  week now without issue.

  ---

  There are two parts of WIFI firmware update. Please double check if
  Ubuntu release has include them.

  A new firmware version for 8260 and 8265 WiFi devices.
  This our Core31 release (-34.ucode).
  
https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware.git/commit/?id=348d2b53326bcef4c260037cc7a6006fc80ca5bb

  A new firmware version  for 3160, 3168, 7260, 7265 and 7265D
  Note: This firmware version hasn't been pulled into mainline yet.
  This includes a security fix.
  The patch in iwlwifi/linux-firmware.git is here:
  
https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware.git/commit/?id=11e310f97470f91e26e6f3408b09871fd6cd3c5c

To manage notifications about this bug go to:
https://bugs.launchpad.net/intel/+bug/1728762/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to