Please update all still-supported Ubuntu releases to iucode-tool v1.5.2
+ CVE-2017-0357 patch, or preferably to iucode-tool v2.1.1.

Updating to iucode-tool v2.1.1 will fix:
* CVE-2017-0357 - fixed in v2.1.1
* Incorrect handling of mixed-stepping systems (one of the two processor 
steppings *would not be updated* resulting in an unsupported runtime situation) 
- fixed in v1.5.2
* Memory usage - fixed in v1.6.1
* Reproducible build of the early-initramfs  - fixed in v2.0
* Corrupted early-initramfs after y2038 issue - fixed in v2.1.

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2017-0357

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1577161

Title:
  Please update Xenial and Willy to 1.5.2-1 (support mixed-stepping
  configurations)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/iucode-tool/+bug/1577161/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to