Update microcode to 20180703 version

[Markus Schade]

Intel has released a new microcode version which includes the prerequisites
for SSBD patches

https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File

This enables Spetre v4 and 3a mitigations. The new version is already available in Debian.
Please sync with unstable and backport it to all still supported releases.

[Hans Joachim Desserud (hjd)]

Thanks for reporting.

>The new version is already available in Debian.

Normally this would be automatically synced to the current development version, Ubuntu Cosmic. However, the most recent package version there contains an additional Ubuntu patch, so if those changes are still needed, someone needs to manually merge the latest version from Debian.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Markus Schade (lp-markusschade)]

Is there anything I could do to help with this issue? Debian has now also backports to jessie and stretch.

[Hans Joachim Desserud (hjd)]

intel-microcode 3.20180703.2ubuntu1 recently landed in Ubuntu Cosmic. For the security fixes covered by this version, they are applied to older releases in bug 1783385.

Markus: as mentioned above, was to reapply or merge the Ubuntu-only changes into the latest Debian package before uploading it to Ubuntu. I don't know which is most up to date, but https://wiki.ubuntu.com/UbuntuDevelopment/Merging/GitWorkflow or https://wiki.ubuntu.com/UbuntuDevelopment/Merging might give you a starting point on how to deal with merges. (From what I remember, you need to provide two resulting debdiffs, one with the changes from the old Ubuntu package to the new one, and one from the Debian package to the new Ubuntu package.