[Bug 1773888] [NEW] intel-microcode & amd64-microcode are in main component but are not free software

Ian Kelling ian at iankelling.org
Tue May 29 04:17:26 UTC 2018


Public bug reported:

Quoting https://help.ubuntu.com/community/Repositories

"The main component contains applications that are free software, can be
freely redistributed and are fully supported by the Ubuntu team."

The intel-microcode license includes this nice sentence:

"* No reverse engineering, decompilation, or disassembly of this
       software is permitted."

So it's nonfree software.

The microcode packages are now a dependency for linux-image-generic
on x86 so people are getting them automatically.

I expect your excuse is security, but the security issues have been
public since January, and you put the microcode into main in May and I
haven't seen any reports of security breaches.

Take it out of main.

** Affects: intel-microcode (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to intel-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/1773888

Title:
  intel-microcode & amd64-microcode are in main component but are not
  free software

Status in intel-microcode package in Ubuntu:
  New

Bug description:
  Quoting https://help.ubuntu.com/community/Repositories

  "The main component contains applications that are free software, can be
  freely redistributed and are fully supported by the Ubuntu team."

  The intel-microcode license includes this nice sentence:

  "* No reverse engineering, decompilation, or disassembly of this
         software is permitted."

  So it's nonfree software.

  The microcode packages are now a dependency for linux-image-generic
  on x86 so people are getting them automatically.

  I expect your excuse is security, but the security issues have been
  public since January, and you put the microcode into main in May and I
  haven't seen any reports of security breaches.

  Take it out of main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/1773888/+subscriptions



More information about the foundations-bugs mailing list