Date: Mon, 15 Apr 2024 16:27:46 +0200 From: infoomatic <infoomatic@gmx.at> To: freebsd-security@freebsd.org Subject: Re: cpu-microcode-intel-20231114 Message-ID: <202633d8-b51c-4f8e-8426-f42a8a79c99d@gmx.at> In-Reply-To: <VI1PR03MB2973A21EFD376EBA669F9275A8092@VI1PR03MB2973.eurprd03.prod.outlook.com> References: <AM5PR03MB296289896D3D652DA041DDC7A8092@AM5PR03MB2962.eurprd03.prod.outlook.com> <202404151356.43FDu3d7023044@higson.cam.lispworks.com> <VI1PR03MB2973A21EFD376EBA669F9275A8092@VI1PR03MB2973.eurprd03.prod.outlook.com>
next in thread | previous in thread | raw e-mail | index | archive | help
pkg update -f refreshes fetches your package catalogue (latest or quarterly - see /etc/pkg/FreeBSD.conf). After that you should be able to upgrade the package. Regards, Robert On 15.04.24 16:19, Marek Anio=C5=82a wrote: > No, it only shows the old version: > > =C2=A0 ~ # pkg search cpu-microcode-intel > =C2=A0 cpu-microcode-intel-20231114 =C2=A0 Intel CPU microcode updates > =C2=A0 ~ # > > The latest version (20240312) is not available. > > > > From:=C2=A0Martin Simmons <martin@lispworks.com> > Sent:=C2=A0Monday, April 15, 2024 15:56 > To:=C2=A0Marek Anio=C5=82a <man130117@outlook.com> > Cc:=C2=A0freebsd-security@freebsd.org <freebsd-security@freebsd.org> > Subject:=C2=A0Re: cpu-microcode-intel-20231114 > >>>>>> On Mon, 15 Apr 2024 09:09:57 +0000, =3D?iso-8859-2?Q?Marek Anio=3DB= 3a?=3D said: >> >> As of 13 March 2024. "pkg audit" reports the following vulnerabilities = in FreeBSD 13.3-RELEASE-p1: >> >> cpu-microcode-intel-20231114 is vulnerable: >> =C2=A0 Intel processors - multiple vulnerabilities >> =C2=A0 CVE: CVE-2023-43490 >> =C2=A0 CVE: CVE-2023-22655 >> =C2=A0 CVE: CVE-2023-28746 >> =C2=A0 CVE: CVE-2023-38575 >> =C2=A0 CVE: CVE-2023-39368 >> =C2=A0 WWW: https://vuxml.FreeBSD.org/freebsd/b6dd9d93-e09b-11ee-92fc-= 1c697a616631.html >> >> Found 1 issue(s) in 1 installed package(s). >> >> The website https://www.freshports.org/sysutils/cpu-microcode-intel/=C2= =A0shows that an update to the package appeared the day before (2024-03-12= ), but the BINARY package providing THE UPDATE IS STILL NOT AVAILABLE! >> >> Should this be the case? >> Or, should I update the microcode in some other way? > > pkg search cpu-microcode-intel says the latest version is called > cpu-microcode-intel-20240312.=C2=A0 I don't know why these packages have= dates in > their names so they don't upgrade automatically.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202633d8-b51c-4f8e-8426-f42a8a79c99d>