Page 1 of 2 12 LastLast
Results 1 to 10 of 16

Thread: ucode-intel update concern

  1. #1

    Default ucode-intel update concern

    Hello OpenSusers,

    I am running Leap 42.3 on my system. I recently tried to do a distribution upgrade with "zypper install dup". Upon reading the list, Zypper informed me that it wanted to downgrade ucode-intel to the previous version. However, after the news about Meltdown and Spectre, I was hesitant, so I began to try and do some research. Right now, I believe I have the most up to date version (20180108-16.1). I didn't know where to start, but I looked at both ucode-intel's changelog and tried the Security Portal to search for any updates since the 8th and have found nothing referencing needing to rollback.

    Am I right to worry? Does anyone know why a downgrade is being recommended? If it's legit (no reason to assume a problem with my keys yet), I have no problem doing so, but given the news around these exploits, I'd like to know where I'm missing the reason as to why a downgrade is being recommended (and where I can go so I don't have to trouble anyone with this kind of question again).

    Edit 1 (Additional note): Also, I figured "Applications" would be the best place to put this thread since it's software, but if there's somewhere more appropriate, please let me know.

  2. #2
    Join Date
    Jun 2008
    Location
    Podunk
    Posts
    27,226
    Blog Entries
    15

    Default Re: ucode-intel update concern

    Hi and welcome to the Forum
    The dup option is only used for distribution upgrade, not normal updates (it will downgrade because it pulls from the oss repo and not updates) only use zypper up to update a normal release (Tumbleweed must use dup since it's a rolling one).

    So just run zypper up and you should be fine.

    I have installed;
    Code:
    Name           : ucode-intel                                
    Version        : 20180108-16.1
    Some more info in this thread and links;
    https://forums.opensuse.org/showthre...bugs-and-Linux
    Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
    SUSE SLE, openSUSE Leap/Tumbleweed (x86_64) | GNOME DE
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below... Thanks!

  3. #3
    Join Date
    Jul 2008
    Location
    Seattle, WA
    Posts
    17,079

    Default Re: ucode-intel update concern

    On Sun, 21 Jan 2018 02:16:01 +0000, tiredpenguin72 wrote:

    > I am running Leap 42.3 on my system. I recently tried to do a
    > distribution upgrade with "zypper install dup".


    I'm guessing you mean 'zypper dup' here. What are you attempting to
    upgrade to?

    Jim
    --
    Jim Henderson
    openSUSE Forums Administrator
    Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

  4. #4

    Default Re: ucode-intel update concern

    @malcolmlewis : Hmmm. When I try to run "zypper update", it doesn't give the ucode-intel package in the list, but it does give others. Would something rolling like Tumbleweed be rolled back for any reason besides a mistake in the release of the firmware for the distro? I usually have used the dup option with no issue, but I'll fall back for awhile to just "zypper update" instead.

    @hendersj : Yeah, definitely meant "zypper dup" there instead. Oops. And I was running "zypper dup" just to upgrade all the packages on my system.

  5. #5
    Join Date
    Jun 2008
    Location
    Podunk
    Posts
    27,226
    Blog Entries
    15

    Default Re: ucode-intel update concern

    Quote Originally Posted by tiredpenguin72 View Post
    @malcolmlewis : Hmmm. When I try to run "zypper update", it doesn't give the ucode-intel package in the list, but it does give others. Would something rolling like Tumbleweed be rolled back for any reason besides a mistake in the release of the firmware for the distro? I usually have used the dup option with no issue, but I'll fall back for awhile to just "zypper update" instead.

    @hendersj : Yeah, definitely meant "zypper dup" there instead. Oops. And I was running "zypper dup" just to upgrade all the packages on my system.
    Hi
    Typo on my part, yes only zypper dup...
    Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
    SUSE SLE, openSUSE Leap/Tumbleweed (x86_64) | GNOME DE
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below... Thanks!

  6. #6
    Join Date
    Nov 2013
    Location
    Kamloops, BC, Canada
    Posts
    3,974

    Default Re: ucode-intel update concern

    Somehow the last few comments seem confusing to me, so might confuse the OP, as well.

    To Clarify:

    Each release of Tumbleweed is a new Distribution, instead of just package updates. This is why it is called a "rolling release".

    Therefore, instead of using the command to get updates, Tumbleweed users must instead use the Distribution Upgrade option:
    Code:
    zypper dup
    For other versions, as in LEAP, you normally only want the updates, so in LEAP you would use:
    Code:
    zypper up
    If you use the Distribution Upgrade option in LEAP, but have not changed your repos from one version to another (say, 42.2 to 42.3, in which case "dup" would upgrade you from 42.2 to 42.3), then it actually reverts you to the non-updated release. In effect, it will actually downgrade much of what is in your system.

    That is why, when you ran "zypper dup" on 42.3, it wanted to go backwards and remove that ucode item.

    Hope that helps clear it up.
    -Gerry Makaro
    Fraser-Bell Info Tech
    Solving Tech Mysteries since the Olden Days!
    ~~
    If I helped you, consider clicking the Star at the bottom left of my post.

  7. #7

    Default Re: ucode-intel update concern

    @Fraser_Bell : Thanks for that. To be honest, I've been using Linux distros for years, but have only scratched the surface. Never got into managing what repos I have in my update settings (but now may be a good time to start).

    I still have to wonder though, if the case is such that I do nothing with my repos (as I never have explicitly), it shouldn't have upgraded my ucode-intel to the newest version as it is now.

    Nevertheless, to clarify, if a proper release of ucode-intel should be filtered down for Leap 42.3, it should come up when I issue "zypper update" and zypper goes about pulling updated repository info from online caches? Do I have that right?

    (Also: Do I need to mark this as "solved"?)

  8. #8

    Default Re: ucode-intel update concern

    And also, thank you to the other two posters as well. Much appreciated!

  9. #9
    Join Date
    Nov 2013
    Location
    Kamloops, BC, Canada
    Posts
    3,974

    Default Re: ucode-intel update concern

    Quote Originally Posted by tiredpenguin72 View Post
    I still have to wonder though, if the case is such that I do nothing with my repos (as I never have explicitly), it shouldn't have upgraded my ucode-intel to the newest version as it is now.
    Well, yes, it should, since a ucode-intel security update was issued for 42.3.

    ... that is, if I am understanding you properly.

    Nevertheless, to clarify, if a proper release of ucode-intel should be filtered down for Leap 42.3, it should come up when I issue "zypper update" and zypper goes about pulling updated repository info from online caches? Do I have that right?
    ... online repositories. Correct.

    BTW: Now would be a good time to check what repositories you have enabled.

    How about give us the output from:
    Code:
    zypper lr -d
    so we can make certain you are not shooting yourself in the foot.

    (Also: Do I need to mark this as "solved"?)
    We actually do not do that in these forums. Generally, we simply expect the person who receives help to come back with a final post to say "It worked" or "It did not work", which is usefull information for anyone looking into this thread for the same problem.
    -Gerry Makaro
    Fraser-Bell Info Tech
    Solving Tech Mysteries since the Olden Days!
    ~~
    If I helped you, consider clicking the Star at the bottom left of my post.

  10. #10

    Default Re: ucode-intel update concern

    The 20180108 ucode-intel update got retracted and removed from the update repo because it caused problems on some systems.
    IOW, the described behaviour is perfectly normal, because the *current* latest version for 42.3 is 20170707-10.1.

    AFAIK, (most) necessary fixes are in the previous version already (the security vulnerabilities had to be fixed/workarounded in the kernel anyway), OTOH there definitely will be another update at some point if necessary.

    Though, you can of course keep 20180108 if you want (and your system works fine with it).

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •