Re: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs

Path	csiph.com!weretis.net!feeder8.news.weretis.net!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From	Henrique de Moraes Holschuh <hmh@debian.org>
Newsgroups	linux.debian.kernel, linux.debian.bugs.dist
Subject	Re: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs
Date	Fri, 29 Jan 2021 17:40:02 +0100
Message-ID	<BCEYq-DN-7@gated-at.bofh.it> (permalink)
References	<BBr7b-37C-3@gated-at.bofh.it> <BBr7b-37C-1@gated-at.bofh.it>
X-Mailbox-Line	From debian-kernel-request@lists.debian.org Fri Jan 29 16:38:11 2021
Old-Return-Path	<hmh@debian.org>
X-Amavis-Spam-Status	No, score=-7.6 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, MD5_SHA1_SUM=-1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Dkim-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=oQX/W1 /M6fNIVeuB+jaZ4dMvH/zOwm73xhGFJxzaefw=; b=U+g7+yGYlZVPHMPsoKXMO6 MKlPVpw20b5fXzE81rFHWQNFhNsD1r+lWgOEh9jiN5uzIHUb753rIrk5+zaa8Zf+ FA+KPTY4p7XilewLLGrzMZjhRD/o1ejOu1quDSmLFL4Ie5RnmFuOJmf5P8TVjvL2 06KBbx7aWPRwNnIz2V0WR8CpLRIFFswwZOJ+pzwDTkr01p+erPLzviCOisuShTST FM+dEsvnTIb6GlC2/ukt1cMMPCV4rI+AQnOKjiABEq5u1mxDuxCxhRa8HLq9W33n vxl6vjnBcTmuAWDVVV+0HWXiKaMGcAr6oQtirvLuVboSSKYlML/qFI+6dlEgYCNw ==
X-Me-Sender	<xms:4zkUYLB1IJia5cwXl-M2T1mVeWo9o0xTr1_6fEoQFiHSz0_dlm7jIw> <xme:4zkUYBhYxFX-V9m-Qy-BI2VuwYQdKHKH5mRPLjl8K-mHTaFUFtLtzrlc4s7gMoztr t8CWq-prsfNXA>
X-Me-Proxy-Cause	gggruggvucftvghtrhhoucdtuddrgeduledrfedvgdeludcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfhfgggtuggjfgesthdttd dttdervdenucfhrhhomhepjfgvnhhrihhquhgvucguvgcuofhorhgrvghsucfjohhlshgt hhhuhhcuoehhmhhhseguvggsihgrnhdrohhrgheqnecuggftrfgrthhtvghrnhepudffhf eiteegtdffieejheeljeelvddufeetjeeitdejteeileejgfettddtjeelnecukfhppedu jeejrdduleegrdejrdefvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmh grihhlfhhrohhmpehhmhhhseguvggsihgrnhdrohhrgh
X-Me-Proxy	<xmx:4zkUYGlqP-lVALKHejiJQ9cMK_BgVuiAwewvnAgvUXziQNaahJJYAA> <xmx:4zkUYNwQSrWkEkXgCXojnvd3BcSna0GKtEO5V_7otrZf0q2mBIo2mQ> <xmx:4zkUYASawkr0KZRSMo3JHIPnH6HZi4Zew6XPPpl1H2THpUsdcYdJqg> <xmx:5DkUYPN1QhTSq0sD0AVbqI4EXPM8OZCV6zUVzd4HbzWm7ORlqNdULA>
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Disposition	inline
X-Gpg-Fingerprint1	4096R/0x0BD9E81139CB4807: C467 A717 507B BAFE D3C1 6092 0BD9 E811 39CB 4807
User-Agent	Mutt/1.10.1 (2018-07-13)
X-Mailing-List	<debian-kernel@lists.debian.org> archive/latest/126698
List-ID	<debian-kernel.lists.debian.org>
List-URL	<https://lists.debian.org/debian-kernel/>
List-Archive	https://lists.debian.org/msgid-search/20210129163751.GB18713@khazad-dum.debian.net
Approved	robomod@news.nic.it
Lines	37
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	970395@bugs.debian.org
X-Original-Date	Fri, 29 Jan 2021 13:37:51 -0300
X-Original-Message-ID	<20210129163751.GB18713@khazad-dum.debian.net>
X-Original-References	<YA/G7fMh8Mr1mmKF@photino.stro.at> <handler.s.C.16116467087458.transcript@bugs.debian.org>
Xref	csiph.com linux.debian.kernel:69358 linux.debian.bugs.dist:1045214

Cross-posted to 2 groups.

Show key headers only | View raw

On Tue, 26 Jan 2021, Debian Bug Tracking System wrote:
> > reassign 970395 amd64-microcode
> Bug #970395 [src:firmware-nonfree] firmware-nonfree: Please add AMD-SEV firmware files (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs
> Bug reassigned from package 'src:firmware-nonfree' to 'amd64-microcode'.
> Ignoring request to alter found versions of bug #970395 to the same values previously set
> Ignoring request to alter fixed versions of bug #970395 to the same values previously set
> > # please update to latest bc9cd0b7b0e96038ccc041ff409948d8f176142d
> > # 20/11/2020 in linux-firmware
> > done
> Unknown command or malformed arguments to command.
> > bc9cd0b7b0e96038ccc041ff409948d8f176142d has:
> Unknown command or malformed arguments to command.
> >    Update AMD SEV firmware to version 0.17 build 44 for AMD family 17h
> Unknown command or malformed arguments to command.
> >     processors with models in the range 00h to 0fh.
> Unknown command or malformed arguments to command.
> >     Update AMD SEV firmware to version 0.24 build 7 for AMD family 17h
> Unknown command or malformed arguments to command.
> Too many unknown commands, stopping here.

I will look into this soon, probably this weekend.

I will direct any questions I have to the submitters and to this bug
report.

However, I have to find out if these firmware data files should go into
the early initramfs like the microcode (and *how*: naming, packaging
into a single file? the early initramfs works differently than normal
firmware loading).  Or should it go into the normal initramfs ?  Or
both?

If you have the answer to these questions and can follow up with them,
it will hasten the fix since I will not have to spend time looking for
the answers.

-- 
  Henrique Holschuh

Back to linux.debian.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Processed (with 5 errors): Re:  Please add AMD-SEV firmware files  (amd-folder) to close CVE-2019-9836 on specific EPYC-CPUs "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-01-26 08:40 +0100
  Re:  Please add AMD-SEV firmware files (amd-folder) to close  CVE-2019-9836 on specific EPYC-CPUs Henrique de Moraes Holschuh <hmh@debian.org> - 2021-01-29 17:40 +0100

csiph-web