[Git][security-tracker-team/security-tracker][master] Track fixed version for intel-microcode upload via unstable

Salvatore Bonaccorso carnil at debian.org
Wed Jun 10 05:06:28 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
54ea2c67 by Salvatore Bonaccorso at 2020-06-10T06:06:01+02:00
Track fixed version for intel-microcode upload via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -37225,7 +37225,7 @@ CVE-2020-0550 (Improper data forwarding in some data cache for some Intel(R) Pro
 	NOTE: https://software.intel.com/security-software-guidance/insights/deep-dive-snoop-assisted-l1-data-sampling
 	NOTE: https://software.intel.com/security-software-guidance/insights/processors-affected-snoop-assisted-l1-data-sampling
 CVE-2020-0549 (Cleanup errors in some data cache evictions for some Intel(R) Processo ...)
-	- intel-microcode <unfixed>
+	- intel-microcode 3.20200609.1
 	[buster] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
 	[stretch] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
 	[jessie] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
@@ -37233,7 +37233,7 @@ CVE-2020-0549 (Cleanup errors in some data cache evictions for some Intel(R) Pro
 	NOTE: https://cacheoutattack.com/
 	NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00329.html
 CVE-2020-0548 (Cleanup errors in some Intel(R) Processors may allow an authenticated  ...)
-	- intel-microcode <unfixed>
+	- intel-microcode 3.20200609.1
 	[buster] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
 	[stretch] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
 	[jessie] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
@@ -37250,7 +37250,7 @@ CVE-2020-0544
 CVE-2020-0543 [Special Register Buffer Data Sampling]
 	RESERVED
 	{DSA-4699-1 DSA-4698-1 DLA-2242-1 DLA-2241-1}
-	- intel-microcode <unfixed>
+	- intel-microcode 3.20200609.1
 	- linux 5.6.14-2
 	NOTE: https://www.vusec.net/projects/crosstalk/
 	NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00320.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54ea2c673612b14f822943a26f92fb2b7c6a353b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54ea2c673612b14f822943a26f92fb2b7c6a353b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200610/6ccc524b/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list