Accepted intel-microcode 3.20180807a.2~deb9u1 (amd64 i386 source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 27 Jan 2019 13:07:47 -0200
Source: intel-microcode
Binary: intel-microcode
Architecture: amd64 i386 source
Version: 3.20180807a.2~deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Henrique de Moraes Holschuh <hmh@debian.org>
Changed-By: Henrique de Moraes Holschuh <hmh@debian.org>
Closes: 907402
Description:
intel-microcode - Processor microcode firmware for Intel CPUs
Changes:
intel-microcode (3.20180807a.2~deb9u1) stretch; urgency=medium
.
* Release managers:
This update is being distributed by Debian in unstable, testing and
jessie- and stretch-backports since 2018-10-30 without issues, and by
most distros since 2018-08/2018-09, with no known reports of
regressions on Westmere EP processors (Spectre mitigations are very
expensive on Nehalem and Westmere, though).
* SECURITY FIX: this update adds the accumulated fixes for Westmere EP
(signature 0x206c2) from nearly a decade, including but likely not
limited to:
+ Implements L1D_FLUSH support (L1TF "Foreshadow/-NG" mitigation)
Intel SA-00161, CVE-2018-3615, CVE-2018-3620, CVE-2018-3646
+ Implements SSBD support (Spectre v4 mitigation),
Disable speculation for (some) RDMSR/WRMSR (Spectre v3a fix)
Intel SA-00115, CVE-2018-3639, CVE-2018-3640
+ Implements IBRS/IBPB/STIPB support, Spectre v2 mitigation.
Intel SA-0088, CVE-2017-5753, CVE-2017-5754
+ Very likely implements LAPIC sinkhole fix
+ Fixes AAK167/BT248: Virtual APIC accesses with 32-bit PAE paging
may cause system crash
* This Westmere EP microcode update has been explicitly approved by
Intel for general distribution by operating systems, refer to the
changelog entry for 3.20180807a.2 below
.
intel-microcode (3.20180807a.2) unstable; urgency=medium
.
* Makefile: unblacklist 0x206c2 (Westmere EP)
According to pragyansri.pathi@intel.com, on message to LP#1795594
on 2018-10-09, we can ship 0x206c2 updates without restrictions.
Also, there are no reports in the field about this update causing
issues (closes: #907402) (LP: #1795594)
Checksums-Sha1:
b11b6b8c15a33d8e1b20e5de434bc05cac97ed1e 1817 intel-microcode_3.20180807a.2~deb9u1.dsc
f3b2eb8a198f9d0e34c9c0113666476a4c096289 1984816 intel-microcode_3.20180807a.2~deb9u1.tar.xz
53387e46df49e5b049d20bb4e502535b6979f1e1 6015 intel-microcode_3.20180807a.2~deb9u1_amd64.buildinfo
cd77a7428d9698e2fabff057206220cafcbefe00 1306466 intel-microcode_3.20180807a.2~deb9u1_amd64.deb
5fadda705fcf3eb53fcc39039c2af04f39077338 4778 intel-microcode_3.20180807a.2~deb9u1_i386.buildinfo
87008fd1bc4c68a072c0f653a5749bbd1147824e 1445214 intel-microcode_3.20180807a.2~deb9u1_i386.deb
Checksums-Sha256:
7e458c589a299b8e18efb0cbcc00a76a03a21e2e9b9ae09d847c05feee7bb15f 1817 intel-microcode_3.20180807a.2~deb9u1.dsc
8d763283ff4385d30e619a854f63a39cb875048a596873b0ad2fd4e0d7a6dbf8 1984816 intel-microcode_3.20180807a.2~deb9u1.tar.xz
88dcc82cde5927790b0e087f62b0eb19dfd4f3700c82abb58d33bb813fbcd3f2 6015 intel-microcode_3.20180807a.2~deb9u1_amd64.buildinfo
379ed270de49d9b813339094f275714b21e04c6b69dd566750106990b958334d 1306466 intel-microcode_3.20180807a.2~deb9u1_amd64.deb
f081f17702d956d515d61ebfd64366e40310b397fe7b892519cdfaf35b139a01 4778 intel-microcode_3.20180807a.2~deb9u1_i386.buildinfo
571fd1acbe3634babfd4a58c803f08ecb7045bfa86a64989a60c757fb4dc728e 1445214 intel-microcode_3.20180807a.2~deb9u1_i386.deb
Files:
c9b515ac6c903e3320a43217c28747c7 1817 non-free/admin standard intel-microcode_3.20180807a.2~deb9u1.dsc
9e3d368f8bab558345268e28f5782966 1984816 non-free/admin standard intel-microcode_3.20180807a.2~deb9u1.tar.xz
9167044db2e55c11d09f326007f2a107 6015 non-free/admin standard intel-microcode_3.20180807a.2~deb9u1_amd64.buildinfo
91ba29d7cb1bd8d8a901280fa04ea50b 1306466 non-free/admin standard intel-microcode_3.20180807a.2~deb9u1_amd64.deb
ea38bdfed4288e5fa4ea9b049f8a1626 4778 non-free/admin standard intel-microcode_3.20180807a.2~deb9u1_i386.buildinfo
edbdfa71aeb0972d64759fb44cbb7be6 1445214 non-free/admin standard intel-microcode_3.20180807a.2~deb9u1_i386.deb
-----BEGIN PGP SIGNATURE-----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=1wdE
-----END PGP SIGNATURE-----
Reply to: