Skip site navigation (1)Skip section navigation (2)


| raw e-mail | index | archive | help
No, it only shows the old version:=0A=
=0A=
=A0 ~ # pkg search cpu-microcode-intel=0A=
=A0 cpu-microcode-intel-20231114 =A0 Intel CPU microcode updates=0A=
=A0 ~ #=0A=
=0A=
The latest version (20240312) is not available.=0A=
=0A=
=0A=
=0A=
From:=A0Martin Simmons <martin@lispworks.com>=0A=
Sent:=A0Monday, April 15, 2024 15:56=0A=
To:=A0Marek Anio=B3a <man130117@outlook.com>=0A=
Cc:=A0freebsd-security@freebsd.org <freebsd-security@freebsd.org>=0A=
Subject:=A0Re: cpu-microcode-intel-20231114=0A=
=A0=0A=
>>>>> On Mon, 15 Apr 2024 09:09:57 +0000, =3D?iso-8859-2?Q?Marek Anio=3DB3a=
?=3D said:=0A=
>=0A=
> As of 13 March 2024. "pkg audit" reports the following vulnerabilities in=
 FreeBSD 13.3-RELEASE-p1:=0A=
>=0A=
> cpu-microcode-intel-20231114 is vulnerable:=0A=
> =A0 Intel processors - multiple vulnerabilities=0A=
> =A0 CVE: CVE-2023-43490=0A=
> =A0 CVE: CVE-2023-22655=0A=
> =A0 CVE: CVE-2023-28746=0A=
> =A0 CVE: CVE-2023-38575=0A=
> =A0 CVE: CVE-2023-39368=0A=
> =A0 WWW: https://vuxml.FreeBSD.org/freebsd/b6dd9d93-e09b-11ee-92fc-1c697a=
616631.html=0A=
>=0A=
> Found 1 issue(s) in 1 installed package(s).=0A=
>=0A=
> The website https://www.freshports.org/sysutils/cpu-microcode-intel/=A0sh=
ows that an update to the package appeared the day before (2024-03-12), but=
 the BINARY package providing THE UPDATE IS STILL NOT AVAILABLE!=0A=
>=0A=
> Should this be the case?=0A=
> Or, should I update the microcode in some other way?=0A=
=0A=
pkg search cpu-microcode-intel says the latest version is called=0A=
cpu-microcode-intel-20240312.=A0 I don't know why these packages have dates=
 in=0A=
their names so they don't upgrade automatically.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?>