[Git][security-tracker-team/security-tracker][master] Track fixed version for intel-microcode upload via unstable
Salvatore Bonaccorso
carnil at debian.org
Wed Jun 10 05:06:28 BST 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
54ea2c67 by Salvatore Bonaccorso at 2020-06-10T06:06:01+02:00
Track fixed version for intel-microcode upload via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -37225,7 +37225,7 @@ CVE-2020-0550 (Improper data forwarding in some data cache for some Intel(R) Pro
NOTE: https://software.intel.com/security-software-guidance/insights/deep-dive-snoop-assisted-l1-data-sampling
NOTE: https://software.intel.com/security-software-guidance/insights/processors-affected-snoop-assisted-l1-data-sampling
CVE-2020-0549 (Cleanup errors in some data cache evictions for some Intel(R) Processo ...)
- - intel-microcode <unfixed>
+ - intel-microcode 3.20200609.1
[buster] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
[stretch] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
[jessie] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
@@ -37233,7 +37233,7 @@ CVE-2020-0549 (Cleanup errors in some data cache evictions for some Intel(R) Pro
NOTE: https://cacheoutattack.com/
NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00329.html
CVE-2020-0548 (Cleanup errors in some Intel(R) Processors may allow an authenticated ...)
- - intel-microcode <unfixed>
+ - intel-microcode 3.20200609.1
[buster] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
[stretch] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
[jessie] - intel-microcode <postponed> (Minor issue; low impact if all mitigations for TAA and MDS were already previously applied)
@@ -37250,7 +37250,7 @@ CVE-2020-0544
CVE-2020-0543 [Special Register Buffer Data Sampling]
RESERVED
{DSA-4699-1 DSA-4698-1 DLA-2242-1 DLA-2241-1}
- - intel-microcode <unfixed>
+ - intel-microcode 3.20200609.1
- linux 5.6.14-2
NOTE: https://www.vusec.net/projects/crosstalk/
NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00320.html
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54ea2c673612b14f822943a26f92fb2b7c6a353b
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54ea2c673612b14f822943a26f92fb2b7c6a353b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200610/6ccc524b/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list