Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #68307

Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs

From "Henrique de Moraes Holschuh" <hmh@debian.org>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs
Date 2020-10-02 04:30 +0200
Message-ID <AViPT-4GQ-1@gated-at.bofh.it> (permalink)
References (3 earlier) <ASURI-8is-3@gated-at.bofh.it> <ATI25-3Q4-3@gated-at.bofh.it> <ATMp3-6Dw-1@gated-at.bofh.it> <APkB3-6n-1@gated-at.bofh.it> <ATMp3-6Dw-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


On Sun, Sep 27, 2020, at 18:27, Ben Hutchings wrote:
> On Sun, 2020-09-27 at 13:43 -0300, Henrique de Moraes Holschuh wrote:
> > Answering from my phone, please excuse brevity and other netiquete
> > issues such as poor quoting cleanup.

This is still true :(

> However, we normally take all changes from linux-firmware.git up to a
> specific tag, and that might not be appropriate for the AMD microcode
> given the potential for system-breaking regressions.

So, until a more workable solution is found, if you need amd64-microcode to carry any other data files, please file a bug.  If I am behind an update for any reason, please file a bug.  I will see it and act on it. You don't need to wait to see if I noticed the upstream update or not, file the bug as soon as you're prepared to.

There was a mention about a pending security update of SES firmware in this thread.  If this needs an amd64-microcode release and if the ses firmware should go into that release, please explicitly say so, preferably in a new bug report, so that we can keep this one open until a final decision is done whether we should drop amd64-microcode as a separate package or keep it just for scripts, or keep the status-quo.

-- 
  Henrique de Moraes Holschuh <hmh@debian.org>

Back to linux.debian.kernel | Previous | NextPrevious in thread | Find similar | Unroll thread


Thread

Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs Michael Musenbrock <michael.musenbrock@gmx.at> - 2020-09-15 17:00 +0200
  Re: Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files  (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs maximilian attems <maks@stro.at> - 2020-09-20 10:40 +0200
    Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs maximilian attems <maks@stro.at> - 2020-09-25 14:20 +0200
      Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs "Henrique de Moraes Holschuh" <hmh@debian.org> - 2020-09-27 18:50 +0200
        Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs Ben Hutchings <ben@decadent.org.uk> - 2020-09-27 23:40 +0200
          Bug#970395: firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs "Henrique de Moraes Holschuh" <hmh@debian.org> - 2020-10-02 04:30 +0200

csiph-web