Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #68140

Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs

From Michael Musenbrock <michael.musenbrock@gmx.at>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs
Date 2020-09-15 17:00 +0200
Message-ID <APkB3-6n-1@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


Source: firmware-nonfree
Severity: important

Dear maintainer,

first of all thanks for maintaining and packaging the linux-firmware files repository as debian packages.

We currently need to manually obtain the linux-firmware.git:amd/amd_sev_fam17h_model3xh.sbin [1] file on
our AMD EPYC servers. The firmware files containing the AMD SEV firmware closing security vulnerabilities [2]
and fixes bugs and adds improvements to the AMD SEV implementation.

I'm most likely unqualified for legal questions but the LICENSE.amd-sev [3] reads quite similar to the already
added amdgpu license [4]. So I hope this is not the reason, why those files were not added in the past.

The severity was choosen because it fixes a security vulnerability, please change accordingly if you think
it is wrong.

Thanks in advance. Best regards,
michael

[1] https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/amd
[2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9836
[3] https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/LICENSE.amd-sev
[4] https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/LICENSE.amdgpu

Back to linux.debian.kernel | Previous | NextNext in thread | Find similar | Unroll thread


Thread

Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs Michael Musenbrock <michael.musenbrock@gmx.at> - 2020-09-15 17:00 +0200
  Re: Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files  (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs maximilian attems <maks@stro.at> - 2020-09-20 10:40 +0200
    Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs maximilian attems <maks@stro.at> - 2020-09-25 14:20 +0200
      Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs "Henrique de Moraes Holschuh" <hmh@debian.org> - 2020-09-27 18:50 +0200
        Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs Ben Hutchings <ben@decadent.org.uk> - 2020-09-27 23:40 +0200
          Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs "Henrique de Moraes Holschuh" <hmh@debian.org> - 2020-10-02 04:30 +0200

csiph-web