From bd86dec75e146d342cd98c3ac0d420ec159fe55d Mon Sep 17 00:00:00 2001 From: Konrad Rzeszutek Wilk Date: Thu, 4 Jan 2018 10:38:42 -0500 Subject: [PATCH] kernel.spec: Require the new microcode_ctl. Which provides the new CPUID and MSRs to combat CVE-2017-5715 Orabug: 27344012 CVE: CVE-2017-5715 Suggested-by: Todd Vierling Signed-off-by: Konrad Rzeszutek Wilk Reviewed-by: John Haxby Signed-off-by: Kirtikar Kashyap --- uek-rpm/ol6/kernel-uek.spec | 2 +- uek-rpm/ol7/kernel-uek.spec | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/uek-rpm/ol6/kernel-uek.spec b/uek-rpm/ol6/kernel-uek.spec index 7617eeb9401c..3eb685829058 100644 --- a/uek-rpm/ol6/kernel-uek.spec +++ b/uek-rpm/ol6/kernel-uek.spec @@ -435,7 +435,7 @@ BuildRequires: rpm-build >= 4.4.2.1-4 # Packages that need to be installed before the kernel is, because the %post # scripts use them. # -%define kernel_prereq fileutils, module-init-tools, initscripts >= 8.11.1-1, /sbin/new-kernel-pkg +%define kernel_prereq fileutils, module-init-tools, initscripts >= 8.11.1-1, /sbin/new-kernel-pkg, microcode_ctl >= 1.17-25.2 %define initrd_prereq dracut-kernel >= 004-242.0.3 # diff --git a/uek-rpm/ol7/kernel-uek.spec b/uek-rpm/ol7/kernel-uek.spec index e3c806ebd90f..2ebada896a4c 100644 --- a/uek-rpm/ol7/kernel-uek.spec +++ b/uek-rpm/ol7/kernel-uek.spec @@ -430,7 +430,7 @@ BuildRequires: rpm-build >= 4.4.2.1-4 # Packages that need to be installed before the kernel is, because the %post # scripts use them. # -%define kernel_prereq fileutils, module-init-tools, initscripts >= 8.11.1-1, %{_sbindir}/new-kernel-pkg +%define kernel_prereq fileutils, module-init-tools, initscripts >= 8.11.1-1, %{_sbindir}/new-kernel-pkg, microcode_ctl >= 2.1-22.2 %define initrd_prereq dracut-kernel >= 033-360.0.3 # -- 2.50.1