[Feature] update microcode to 20130807 version

Bug #1212497 reported by XiongZhang
268
This bug affects 2 people
Affects Status Importance Assigned to Milestone
intel
Fix Released
High
Unassigned
intel-microcode (Ubuntu)
Fix Released
Undecided
Tim Gardner
Precise
Fix Released
Undecided
Tim Gardner
Quantal
Fix Released
Undecided
Tim Gardner
Raring
Fix Released
Undecided
Tim Gardner
Saucy
Fix Released
Undecided
Tim Gardner

Bug Description

Intel has released new microcode 20130807 version which included a very important Security Fix for Intel processors. Please update it to related distributions.

URL: http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=23082

Tim Gardner (timg-tpi)
information type: Private → Private Security
information type: Private Security → Public Security
Changed in intel-microcode (Ubuntu Precise):
assignee: nobody → Tim Gardner (timg-tpi)
status: New → In Progress
Changed in intel-microcode (Ubuntu Quantal):
assignee: nobody → Tim Gardner (timg-tpi)
status: New → In Progress
Changed in intel-microcode (Ubuntu Raring):
assignee: nobody → Tim Gardner (timg-tpi)
status: New → In Progress
Changed in intel-microcode (Ubuntu Saucy):
assignee: nobody → Tim Gardner (timg-tpi)
status: New → In Progress
Tim Gardner (timg-tpi)
Changed in intel-microcode (Ubuntu Precise):
status: In Progress → Fix Committed
Changed in intel-microcode (Ubuntu Quantal):
status: In Progress → Fix Committed
Changed in intel-microcode (Ubuntu Raring):
status: In Progress → Fix Committed
Changed in intel-microcode (Ubuntu Saucy):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package intel-microcode - 1.20130808.1ubuntu1

---------------
intel-microcode (1.20130808.1ubuntu1) saucy; urgency=low

  * Added microcode-20130808.dat
    -LP: #1212497
 -- Tim Gardner <email address hidden> Thu, 15 Aug 2013 08:02:05 -0600

Changed in intel-microcode (Ubuntu Saucy):
status: Fix Committed → Fix Released
Revision history for this message
dino99 (9d9) wrote :

It should be helpfull to fix that one too at the same time : https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/1194370

Revision history for this message
Henrique de Moraes Holschuh (hmh) wrote :

Guys, could you please notify me (Debian upstream for intel-microcode) of such issues in the future?

I will now have to re-upload to Debian with a high priority and changelog, and coordinate uploads to Debian stable... and it was pure luck that I noticed this bug.

If it is a matter of embargoed security issues and you cannot notify me, please at least notify the Debian security team, or at the very least drop me a note once the embargo is lifted.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package intel-microcode - 0.20130808-q-1ubuntu1

---------------
intel-microcode (0.20130808-q-1ubuntu1) quantal-security; urgency=low

  * New upstream data file: microcode-20130808
    -LP: #1212497
 -- Tim Gardner <email address hidden> Tue, 20 Aug 2013 12:22:43 -0600

Changed in intel-microcode (Ubuntu Quantal):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package intel-microcode - 0.20130808-p-1ubuntu1

---------------
intel-microcode (0.20130808-p-1ubuntu1) precise-security; urgency=low

  * New upstream data file: microcode-20130808
    -LP: #1212497
 -- Tim Gardner <email address hidden> Tue, 20 Aug 2013 12:17:44 -0600

Changed in intel-microcode (Ubuntu Precise):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package intel-microcode - 1.20130808-r-1ubuntu1

---------------
intel-microcode (1.20130808-r-1ubuntu1) raring-security; urgency=low

  * Added microcode-20130808.dat
    -LP: #1212497
 -- Tim Gardner <email address hidden> Tue, 20 Aug 2013 12:27:53 -0600

Changed in intel-microcode (Ubuntu Raring):
status: Fix Committed → Fix Released
Revision history for this message
Seth Arnold (seth-arnold) wrote :

Henrique, sure, I can try to notice these in the future and pass them along.

This wasn't handled as an embargoed security update: the first we heard about it was this bug report. (Thanks Xiong.)

Thanks Tim for preparing the update.

Revision history for this message
Moritz Naumann (mnaumann) wrote :

Thanks for providing this update.

Would you also be so kind as to let your users know what this "very important security update" they get prompted to install is about? Intels' website doesn't seem to say, nor does this bug report / feature request.

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Moritz, I personally have never seen any detailed changelog information for Intel-provided microcode updates.

Whether or not this microcode update includes security fixes is entirely conjectural. Intel went to the effort of providing the updated microcode, so someone there believes their customers would be better with the fixes than without the fixes, but we, like you, have no specific information what features or fixes these updates add or remove.

Thanks

Changed in intel:
status: New → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.