Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 894474 - <sys-firmware/intel-microcode-20230214_p20230212: Multiple vulnerabilities
Summary: <sys-firmware/intel-microcode-20230214_p20230212: Multiple vulnerabilities
Status: IN_PROGRESS
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: A2 [glsa+ cleanup]
Keywords:
Depends on:
Blocks:
 
Reported: 2023-02-15 01:31 UTC by Sam James
Modified: 2024-02-19 06:13 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Larry the Git Cow gentoo-dev 2023-02-15 01:39:54 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=36dccf12ff7eddd2529908e7ffc170a75a576d34

commit 36dccf12ff7eddd2529908e7ffc170a75a576d34
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-02-15 01:36:17 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-02-15 01:38:25 +0000

    sys-firmware/intel-microcode: add 20230214_p20230212
    
    Bug: https://bugs.gentoo.org/894474
    Signed-off-by: Sam James <sam@gentoo.org>

 sys-firmware/intel-microcode/Manifest              |   2 +
 .../intel-microcode-20230214_p20230212.ebuild      | 281 +++++++++++++++++++++
 2 files changed, 283 insertions(+)
Comment 2 Hans de Graaff gentoo-dev Security 2024-01-21 10:16:17 UTC
Please clean up the vulnerable intel-microcode versions 20221108_p20221102 and 20230214_p20230212.
Comment 3 Larry the Git Cow gentoo-dev 2024-02-19 06:11:07 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=62babe5642376fcb1290e16ecd12047d38418a82

commit 62babe5642376fcb1290e16ecd12047d38418a82
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-02-19 05:57:31 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2024-02-19 06:10:22 +0000

    [ GLSA 202402-22 ] intel-microcode: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/832985
    Bug: https://bugs.gentoo.org/894474
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 glsa-202402-22.xml | 44 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)
Comment 4 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2024-02-19 06:13:42 UTC
Ping, please cleanup