Date: Mon, 15 Apr 2024 14:44:03 +0000 From: =?iso-8859-2?Q?Marek_Anio=B3a?= <man130117@outlook.com> To: infoomatic <infoomatic@gmx.at>, "freebsd-security@freebsd.org" <freebsd-security@freebsd.org> Subject: Re: cpu-microcode-intel-20231114 Message-ID: <VI1PR03MB297393B6C7435F7306600593A8092@VI1PR03MB2973.eurprd03.prod.outlook.com> In-Reply-To: <202633d8-b51c-4f8e-8426-f42a8a79c99d@gmx.at> References: <AM5PR03MB296289896D3D652DA041DDC7A8092@AM5PR03MB2962.eurprd03.prod.outlook.com> <202404151356.43FDu3d7023044@higson.cam.lispworks.com> <VI1PR03MB2973A21EFD376EBA669F9275A8092@VI1PR03MB2973.eurprd03.prod.outlook.com> <202633d8-b51c-4f8e-8426-f42a8a79c99d@gmx.at>
next in thread | previous in thread | raw e-mail | index | archive | help
That helped=0A= (I had "quaterly" instead of "latest" in url line of /usr/local/etc/pkg/rep= os/FreeBSD.conf).=0A= Thanks a lot=0A= =0A= =0A= From:=A0owner-freebsd-security@FreeBSD.org <owner-freebsd-security@FreeBSD.= org> on behalf of infoomatic <infoomatic@gmx.at>=0A= Sent:=A0Monday, April 15, 2024 16:27=0A= To:=A0freebsd-security@freebsd.org <freebsd-security@freebsd.org>=0A= Subject:=A0Re: cpu-microcode-intel-20231114=0A= =A0=0A= pkg update -f=0A= =0A= refreshes fetches your package catalogue (latest or quarterly - see=0A= /etc/pkg/FreeBSD.conf). After that you should be able to upgrade the=0A= package.=0A= =0A= Regards,=0A= Robert=0A= =0A= =0A= On 15.04.24 16:19, Marek Anio=B3a wrote:=0A= > No, it only shows the old version:=0A= >=0A= >=A0 =A0 ~ # pkg search cpu-microcode-intel=0A= >=A0 =A0 cpu-microcode-intel-20231114 =A0 Intel CPU microcode updates=0A= >=A0 =A0 ~ #=0A= >=0A= > The latest version (20240312) is not available.=0A= >=0A= >=0A= >=0A= > From:=A0Martin Simmons <martin@lispworks.com>=0A= > Sent:=A0Monday, April 15, 2024 15:56=0A= > To:=A0Marek Anio=B3a <man130117@outlook.com>=0A= > Cc:=A0freebsd-security@freebsd.org <freebsd-security@freebsd.org>=0A= > Subject:=A0Re: cpu-microcode-intel-20231114=0A= >=0A= >>>>>> On Mon, 15 Apr 2024 09:09:57 +0000, =3D?iso-8859-2?Q?Marek Anio=3DB3= a?=3D said:=0A= >>=0A= >> As of 13 March 2024. "pkg audit" reports the following vulnerabilities i= n FreeBSD 13.3-RELEASE-p1:=0A= >>=0A= >> cpu-microcode-intel-20231114 is vulnerable:=0A= >>=A0 =A0 Intel processors - multiple vulnerabilities=0A= >>=A0 =A0 CVE: CVE-2023-43490=0A= >>=A0 =A0 CVE: CVE-2023-22655=0A= >>=A0 =A0 CVE: CVE-2023-28746=0A= >>=A0 =A0 CVE: CVE-2023-38575=0A= >>=A0 =A0 CVE: CVE-2023-39368=0A= >>=A0 =A0 WWW: https://vuxml.FreeBSD.org/freebsd/b6dd9d93-e09b-11ee-92fc-1c= 697a616631.html=0A= >>=0A= >> Found 1 issue(s) in 1 installed package(s).=0A= >>=0A= >> The website https://www.freshports.org/sysutils/cpu-microcode-intel/=A0s= hows that an update to the package appeared the day before (2024-03-12), bu= t the BINARY package providing THE UPDATE IS STILL NOT AVAILABLE!=0A= >>=0A= >> Should this be the case?=0A= >> Or, should I update the microcode in some other way?=0A= >=0A= > pkg search cpu-microcode-intel says the latest version is called=0A= > cpu-microcode-intel-20240312.=A0 I don't know why these packages have dat= es in=0A= > their names so they don't upgrade automatically.=0A= =0A=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?VI1PR03MB297393B6C7435F7306600593A8092>