[Bug 1925971] Re: SRU bluetooth fixes and CVEs to focal and groovy

[Launchpad Bug Tracker]

This bug was fixed in the package linux-firmware-raspi2 -
4-0ubuntu0~20.10.1

---------------
linux-firmware-raspi2 (4-0ubuntu0~20.10.1) groovy; urgency=medium

  * Pull in latest from hirsute (LP: #1925971)
    - Add aliases and diversions for brcmfmac43455 configuration on the
      Raspberry Pi Compute Module 4, and 400 (LP: #1912905)

    - Added diversions for all wifi firmware blobs (LP: #1918013)
    - New upstream boot firmware release, 1.20210303
    - New upstream bluetooth firmware release, 1.2-4+rpt8

      [ Phil Elwell ]
      - Second Spectra fix for CYW43455 (CVE-2020-10370)
        - Original firmware name: BCM4345C0_003.001.025.0174.0342.hcd

    - New upstream wifi firmware release, 1:20190114-1+rpt11

      [ Serge Schneider ]
      - Update CYW43455 firmware
        - brcm/brcmfmac43455-sdio.bin 7.45.229
        - See: https://github.com/raspberrypi/linux/issues/3849

 -- William 'jawn-smith' Wilson <william.wilson at canonical.com>  Fri, 23
Apr 2021 16:05:55 -0500

** Changed in: linux-firmware-raspi2 (Ubuntu Groovy)
       Status: Fix Committed => Fix Released

** Bug watch added: github.com/raspberrypi/linux/issues #3849
   https://github.com/raspberrypi/linux/issues/3849

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-10370

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to linux-firmware-raspi2 in
Ubuntu.
https://bugs.launchpad.net/bugs/1925971

Title:
  SRU bluetooth fixes and CVEs to focal and groovy

Status in linux-firmware-raspi2 package in Ubuntu:
  New
Status in linux-firmware-raspi2 source package in Focal:
  Fix Released
Status in linux-firmware-raspi2 source package in Groovy:
  Fix Released

Bug description:
  [Impact]

  Without these patches, Bluetooth is inoperable on the CM4 and Pi 400

  [Test Case]

  * Boot the Ubuntu Desktop for Pi image on a CM4.
  * Start the Settings application and switch to the Bluetooth tab
  * Verify that Bluetooth is not enabled and attempting to activate it fails
  * Repeat the above steps for the Pi 400

  [Regression Potential]

  There are some diversions and other firmware updates that could
  potentially cause issues. These have been tested on lots of different
  pi hardware and no issues have been discovered. There is also an
  included Spectra CVE fix which is very low risk.

  [Original Description]
  Hirsute has some patches that address CVEs and enable bluetooth/wifi on the CM4 and 400. They need to be SRU'd to focal and groovy.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-firmware-raspi2/+bug/1925971/+subscriptions