601180 – sys-apps/iucode_tool-2.1 version bump

Bug 601180 - sys-apps/iucode_tool-2.1 version bump

Summary: sys-apps/iucode_tool-2.1 version bump

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo's Team for Core System packages

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:	607218
	Show dependency tree

Reported:	2016-11-29 10:06 UTC by Henrique de Moraes Holschuh
Modified:	2017-01-25 21:49 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Henrique de Moraes Holschuh 2016-11-29 10:06:39 UTC

Please update the sys-apps/iucode_tool package to the newest upstream release:

v2.1:
  * The early initramfs cpio archives created by iucode_tool are now
    deterministic.  Instead of the current system time, the date of
    the latest microcode included in the early initramfs will be used.
  * There is a new option to minimize the size of the early initramfs:
    --mini-earlyfw.  This option causes iucode_tool to create a non-
    standard cpio archive which is typically 736 bytes smaller.
    WARNING: the microcode data file might not be visible to the
    regular initramfs when this mode is used.
  * iucode-tool will now create valid early initramfs archives past
    year 2038.

Comment 1 Henrique de Moraes Holschuh 2017-01-13 17:38:11 UTC

Meanwhile, I have released a security-fix update for iucode-tool v1.4 and later, up to iucode-tool v2.1.

Please update.

v2.1.1:
  * Fix CVE-2017-0357: iucode_tool: heap buffer overflow on -tr loader

Comment 2 Robin Johnson archtester

2017-01-25 21:49:13 UTC

InGit