[Bug 1733582] Re: intel released new microcode fixing several CVE's related to the ME

[Léon Hagenaars-Keus]

The package is allready available upstream
(https://packages.debian.org/sid/intel-microcode)

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5705

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5708

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5711

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5712

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to intel-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/1733582

Title:
  intel released new microcode fixing several CVE's related to the ME

Status in intel-microcode package in Ubuntu:
  New

Bug description:
  Intel released a new microcode file (https://downloadcenter.intel.com/download/27337/Linux-Processor-Microcode-Data-File) which fixes several cve's (CVE-2017-5705, CVE-2017-5708, CVE-2017-5711 and CVE-2017-5712, see https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr).
  I think this warrents a new version of the intel-microcode package.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/1733582/+subscriptions