Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.devel.release > #123580 > unrolled thread

Bug#1068082: bullseye-pu: package intel-microcode/3.20240312.1~deb11u1

Back to article view | Back to linux.debian.devel.release

Contents

  Bug#1068082: bullseye-pu: package intel-microcode/3.20240312.1~deb11u1 Henrique de Moraes Holschuh <hmh@debian.org> - 2024-03-30 12:00 +0100
    Bug#1068082: bullseye-pu: package intel-microcode/3.20240312.1~deb11u1 Jonathan Wiltshire <jmw@debian.org> - 2024-04-22 19:10 +0200
      Bug#1068082: bullseye-pu: package intel-microcode/3.20240312.1~deb11u1 "Henrique de Moraes Holschuh" <hmh@debian.org> - 2024-05-02 17:00 +0200
    Processed: Re: Bug#1068082: bullseye-pu: package intel-microcode/3.20240312.1~deb11u1 "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-04-22 19:10 +0200
    Bug#1068082: intel-microcode 3.20240312.1~deb11u1 flagged for acceptance Jonathan Wiltshire <jmw@debian.org> - 2024-05-12 12:50 +0200
      Processed: intel-microcode 3.20240312.1~deb11u1 flagged for  acceptance "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-05-12 12:50 +0200

#123580 — Bug#1068082: bullseye-pu: package intel-microcode/3.20240312.1~deb11u1

[Multipart message — attachments visible in raw view] — view raw

Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian.org@packages.debian.org
Usertags: pu

(duplicate submission, this one is signed. sorry about that!)

[ Reason ]

As requested by the security team, I would like to bring the microcode
update level for Intel processors in Bullseye and Bookworm to match what
we have in Sid and Trixie.  This is the bug report for Bullseye, a
separate one will be filled for Bookmorm.

This fixes:
* Several CVEs in many Intel processors
  - Mitigations for INTEL-SA-INTEL-SA-00972 (CVE-2023-39368)
  - Mitigations for INTEL-SA-INTEL-SA-00982 (CVE-2023-38575)
  - Mitigations for INTEL-SA-INTEL-SA-00898 (CVE-2023-28746), aka RFDS
  - Mitigations for INTEL-SA-INTEL-SA-00960 (CVE-2023-22655), aka TECRA
  - Mitigations for INTEL-SA-INTEL-SA-01045 (CVE-2023-43490)
* Other unspecified functional issues on many processors

There are no releavant issues reported on this microcode update,
considering the version of intel-microcode already available as security
updates for bookworm and bullseye.

[ Impact ]

If this update is not approved, owners of most recent "client" Intel
processors and a few server processors will depend on UEFI updates to be
protected against RFDS as well as the other issues listed above.

[ Tests ]

There were no bug reports from users of Debian sid or Trixie, these
packages have been tested there since 2024-03-13 (sid), 2024-03-18
(trixie).

[ Risks ]

Unknown, but not believed to be any different from other Intel microcode
updates.

Linux kernel updates related to the RFDS microcode update fixes are
either already available in Bookworm and Bullseye, or have already been
requested as spu's.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]

As per the debdiff, only documentation changes, package documentation
changes, and the binary blob change from upstream.

Diffstat:
 b/changelog            |   77 +++++++++++++++++++++++++++++++++++++++
 b/debian/changelog     |   89 +++++++++++++++++++++++++++++++++++++++++++++
 b/intel-ucode/06-55-03 |binary
 b/intel-ucode/06-55-06 |binary
 b/intel-ucode/06-55-07 |binary
 b/intel-ucode/06-55-0b |binary
 b/intel-ucode/06-56-05 |binary
 b/intel-ucode/06-5f-01 |binary
 b/intel-ucode/06-6a-06 |binary
 b/intel-ucode/06-6c-01 |binary
 b/intel-ucode/06-7a-01 |binary
 b/intel-ucode/06-7a-08 |binary
 b/intel-ucode/06-7e-05 |binary
 b/intel-ucode/06-8c-01 |binary
 b/intel-ucode/06-8c-02 |binary
 b/intel-ucode/06-8d-01 |binary
 b/intel-ucode/06-8e-0c |binary
 b/intel-ucode/06-8f-05 |binary
 b/intel-ucode/06-8f-06 |binary
 b/intel-ucode/06-8f-07 |binary
 b/intel-ucode/06-8f-08 |binary
 b/intel-ucode/06-96-01 |binary
 b/intel-ucode/06-97-02 |binary
 b/intel-ucode/06-97-05 |binary
 b/intel-ucode/06-9a-03 |binary
 b/intel-ucode/06-9a-04 |binary
 b/intel-ucode/06-9c-00 |binary
 b/intel-ucode/06-9e-09 |binary
 b/intel-ucode/06-9e-0a |binary
 b/intel-ucode/06-9e-0c |binary
 b/intel-ucode/06-9e-0d |binary
 b/intel-ucode/06-a5-02 |binary
 b/intel-ucode/06-a5-03 |binary
 b/intel-ucode/06-a5-05 |binary
 b/intel-ucode/06-a6-00 |binary
 b/intel-ucode/06-a6-01 |binary
 b/intel-ucode/06-a7-01 |binary
 b/intel-ucode/06-aa-04 |binary
 b/intel-ucode/06-b7-01 |binary
 b/intel-ucode/06-ba-02 |binary
 b/intel-ucode/06-ba-03 |binary
 b/intel-ucode/06-ba-08 |binary
 b/intel-ucode/06-be-00 |binary
 b/intel-ucode/06-bf-02 |binary
 b/intel-ucode/06-bf-05 |binary
 b/intel-ucode/06-cf-01 |binary
 b/intel-ucode/06-cf-02 |binary
 b/releasenote.md       |   96 +++++++++++++++++++++++++++++++++++++++++++++++++
 49 files changed, 262 insertions(+)

[ Other info ]

The package version with "~" is needed to guarantee smooth updates to
the next debian release.

-- 
  Henrique Holschuh

[toc] | [next] | [standalone]

#123922

Control: tag -1 confirmed

On Sat, Mar 30, 2024 at 07:50:45AM -0300, Henrique de Moraes Holschuh wrote:
> As requested by the security team, I would like to bring the microcode
> update level for Intel processors in Bullseye and Bookworm to match what
> we have in Sid and Trixie.  This is the bug report for Bullseye, a
> separate one will be filled for Bookmorm.

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire                                      jmw@debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1

[toc] | [prev] | [next] | [standalone]

#124113

On Mon, Apr 22, 2024, at 13:58, Jonathan Wiltshire wrote:
> Control: tag -1 confirmed
>
> On Sat, Mar 30, 2024 at 07:50:45AM -0300, Henrique de Moraes Holschuh wrote:
>> As requested by the security team, I would like to bring the microcode
>> update level for Intel processors in Bullseye and Bookworm to match what
>> we have in Sid and Trixie.  This is the bug report for Bullseye, a
>> separate one will be filled for Bookmorm.
>
> Please go ahead.

Uploaded!

Thank you!

-- 
  Henrique de Moraes Holschuh <hmh@debian.org>

[toc] | [prev] | [next] | [standalone]

#123924 — Processed: Re: Bug#1068082: bullseye-pu: package intel-microcode/3.20240312.1~deb11u1

Processing control commands:

> tag -1 confirmed
Bug #1068082 [release.debian.org] bullseye-pu: package intel-microcode/3.20240312.1~deb11u1
Bug #1068083 [release.debian.org] bullseye-pu: package intel-microcode/3.20240312.1~deb11u1
Added tag(s) confirmed.
Added tag(s) confirmed.

-- 
1068082: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068082
1068083: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068083
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#124315 — Bug#1068082: intel-microcode 3.20240312.1~deb11u1 flagged for acceptance

package release.debian.org
tags 1068082 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: intel-microcode
Version: 3.20240312.1~deb11u1

Explanation: fixes for INTEL-SA-INTEL-SA-00972 [CVE-2023-39368], INTEL-SA-INTEL-SA-00982 [CVE-2023-38575], INTEL-SA-INTEL-SA-00898 [CVE-2023-28746], INTEL-SA-INTEL-SA-00960 [CVE-2023-22655] and INTEL-SA-INTEL-SA-01045 [CVE-2023-43490]

[toc] | [prev] | [next] | [standalone]

#124317 — Processed: intel-microcode 3.20240312.1~deb11u1 flagged for acceptance

Processing commands for control@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1068082 = bullseye pending
Bug #1068082 [release.debian.org] bullseye-pu: package intel-microcode/3.20240312.1~deb11u1
Bug #1068083 [release.debian.org] bullseye-pu: package intel-microcode/3.20240312.1~deb11u1
Added tag(s) pending; removed tag(s) confirmed.
Added tag(s) pending; removed tag(s) confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1068082: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068082
1068083: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068083
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.devel.release

csiph-web