On 2021-06-30 21:52:36 +0200, Paul Gevers wrote: > Control: tags -1 moreinfo > > Hi Sebastian > > On 29-06-2021 22:41, Sebastian Ramacher wrote: > >> Please note that the current plans are that a Debian 10 (buster) > >> security update, intel-microcode/3.20210608.2~deb10u1, will be delivered > >> to Debian stable in the next couple days through debian-security, in > >> which case the version currently in Debian 11 "bullseye" would be > >> *OLDER* than what would be available in buster-security and unstable. > >> > >> Also, please be warned that this update has the potential to cause > >> regressions when compared to the previous version of the intel-microcode > >> package. But do read the text below for the full rationale. > > > > The regression potential seems worth adding to the release notes. > > Cloning and reassigning accordingly. > > I may be missing something, or your intentions, but if I understand > correctly, users that upgrade to bullseye will already have had the > regression and as such the release notes will not help them to prepare > for the upgrade. Hence, if this needs further documenting, I think we > should look for better places. We still don't have a fix for iwlwifi. So if people held back on upgrading intel-microcode because of the warning in DSA-4934-1, I think we should warn again in the release-notes. I'd rather have this documented one time too much instead of people rebooting with broken wifi after the upgrade or system failing to boot. (I'm not sure if there are people out there that start from an up-to-date buster without the security archive enabled. In that case they also have an intel-firmware package installed without the regressions.) What about the following text (adapted from the DSA)? The intel-firmware package contained in bullseye and released as part of DSA-4934-1 is known to contain two significant bugs. For some CoffeeLake CPUs this update may break iwlwifi (https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/56) and some for Skylake R0/D0 CPUs on systems using a very outdated firmware/BIOS, the system may hang on boot: (https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/31) If you held back the update from DSA-4934-1 due to any of these two issues or do not have the security archive enabled, be aware that upgrading to the intel-firwmare package in bullseye may cause your system to hang on boot or break iwlwifi. In that case, you can recover by disabling microcode loading on boot (as documented in README.Debian, also available online at https://salsa.debian.org/hmh/intel-microcode/-/blob/master/debian/README.Debian) Cheers Sebastian -- Sebastian Ramacher
Attachment:
signature.asc
Description: PGP signature