Your message dated Thu, 10 Aug 2023 13:19:09 +0000 with message-id <e1qu5zf-001wcj...@fasolo.debian.org> and subject line Bug#1043381: fixed in amd64-microcode 3.20230808.1 has caused the Debian Bug report #1043381, regarding amd64-microcode: Followups for 4th Gen AMD EPYC processors for CVE-2023-20569 / AMD Inception to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1043381: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1043381 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: amd64-microcode Version: 3.20230719.1 Severity: grave Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team <t...@security.debian.org> Control: found -1 3.20230414.1 Control: found -1 3.20230719.1~deb12u1 Control: found -1 3.20191218.1 Control: found -1 3.20230719.1~deb11u1 Hi Henrique, From https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html we did fortunately covered the 3rd Gen AMD EPYC processors microcode updates for CVE-2023-20569 already with the previous done update: amd64-microcode (3.20230719.1) unstable; urgency=high * Update package data from linux-firmware 20230625-39-g59fbffa9: * Fixes for CVE-2023-20593 "Zenbleed" on AMD Zen2 processors (closes: #1041863) * New Microcode patches: + Family=0x17 Model=0xa0 Stepping=0x00: Patch=0x08a00008 * Updated Microcode patches: + Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107a + Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a001079 + Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d1 + Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001234 * README: update for new release -- Henrique de Moraes Holschuh <h...@debian.org> Mon, 24 Jul 2023 13:07:34 -0300 (and so in {bookworm,bullseye,buster}-security as well). There was a microcode followup today as https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=f2eb058afc57348cde66852272d6bf11da1eef8f which followups for the 4th Gen AMD EPYC processors, Genoa (Family=0x19 Model=0x11) and Bergamo (Family=0x19 Model=0xa0). Regards, Salvatore
--- End Message ---
--- Begin Message ---Source: amd64-microcode Source-Version: 3.20230808.1 Done: Henrique de Moraes Holschuh <h...@debian.org> We believe that the bug you reported is fixed in the latest version of amd64-microcode, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1043...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Henrique de Moraes Holschuh <h...@debian.org> (supplier of updated amd64-microcode package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 10 Aug 2023 09:48:49 -0300 Source: amd64-microcode Architecture: source Version: 3.20230808.1 Distribution: unstable Urgency: high Maintainer: Henrique de Moraes Holschuh <h...@debian.org> Changed-By: Henrique de Moraes Holschuh <h...@debian.org> Closes: 1043381 Changes: amd64-microcode (3.20230808.1) unstable; urgency=high . * Update package data from linux-firmware 20230804-6-gf2eb058a * Fixes for CVE-2023-20593 "Zenbleed" on AMD Zen4 processors * Fixes for CVE-2023-20569 "AMD Inception" on AMD Zen4 processors (closes: #1043381) * WARNING: for proper operation on AMD Genoa and Bergamo processors, either up-to-date BIOS (with AGESA 1.0.0.8 or newer) or up-to-date Linux kernels (minimal versions on each active Linux stable branch: v4.19.289 v5.4.250 v5.10.187 v5.15.120 v6.1.37 v6.3.11 v6.4.1) are *required* * New Microcode patches: + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a10113e + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a10123e + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00212 + Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116 * README: update for new release * debian/NEWS: AMD Genoa/Bergamo kernel version restrictions * debian/changelog: update entry for release 3.20230719.1, noting that it included fixes for "AMD Inception" for Zen3 processors Checksums-Sha1: f85504329edf787c0559632e125cb9b03d0ce3b9 1695 amd64-microcode_3.20230808.1.dsc 5217bbd94eb227bfe0c53284310d176b364be7d5 141876 amd64-microcode_3.20230808.1.tar.xz 29f9ea097c6484a45d4339b0dbf293245a45133a 6542 amd64-microcode_3.20230808.1_amd64.buildinfo Checksums-Sha256: 3f810bbcc2e5c2ca3f18ac74ac60c8cb7e7f98a128b94e980efdb77cd1f4566d 1695 amd64-microcode_3.20230808.1.dsc 9d8eb8e874e19308a5178a42e22839972238f755801e88e32e4abcc48e6b6bd5 141876 amd64-microcode_3.20230808.1.tar.xz 083fb8be77e86e94826246623139171ac8f765856eb89e1f12da12cab6bae460 6542 amd64-microcode_3.20230808.1_amd64.buildinfo Files: 3537c14259e37f521d76e3edcce7ccbf 1695 non-free-firmware/admin standard amd64-microcode_3.20230808.1.dsc a239967fb2c0f0bd023f998b4a14db96 141876 non-free-firmware/admin standard amd64-microcode_3.20230808.1.tar.xz c011ab58b236f953db4bcf7c0526a381 6542 non-free-firmware/admin standard amd64-microcode_3.20230808.1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIXEYtQeAQUHyKjs9TkVcVzAplOQFAmTU3ykACgkQTkVcVzAp lORQJA/+KkLES++hQWnsGDHtYsD6OdPVf5UMhlrwCAiHj8JxPGqtrF/+eIyxugRI +zxJFBQFtDajdmuLeZA6qkEN3MbGpqz3+9Q69wBo0mX/+8mdRa//OEHEe5k6DxyI LMd7+3kC5qplOCVVv2DNP24idp6ox7fBHhKF2iu3/au0a8uc8ZbeaSpp/l6oDsMc p8yxnYFU3scu5gfLpuwpvod4Tp1m2h88lA8LeeksnfHHnKahTMSJgyJ/gPX+JNA4 oY0NBqteN7Nsx9BcIV73q0EuF5OXi+RLq33jc7ovDbPzazperGw+ZW9zvlI0rfRI wQKO36Fmt2PeLtGvVUjNOsvmbqew9SsfAnzqtebfi2/n/vkBmDmoTHxgwPx9JE2c RZwc8Y8nzQHWPtVAsjfz3YoO8PwlI/C/5DydGFD9OnNSuermhKZJW9IgUOTBd5b3 FYiJ/wGU9k8gOHFtAyGiBvi3Foj0S7J7Hv+vxqKTT701zHQRGr4mZpbassrJeptW 5rFuJ5KWo7XjjDsu+V54eeC1Z4jZplnZVmQ8W6gu0vYEsM9MDq85w0lRxbnbxSfl mFgrJMlZ+H2Pa0h7gI9J7dqYQ59v2JKpoT/dzmlXdTWhCPnqxtib9Xa7SB7nQwh3 P8YR9HjknsWD1AJzOOx7UjN3/dwZ9gWyOUbGD0d/k+eBIQ2v/WQ= =ntcd -----END PGP SIGNATURE-----
--- End Message ---
