[Bug 2040112] Re: intel-microcode

[Rick S]

No I wasn't worried about it another user in the forum brought it to our
attention and maybe we could make it word a little bit cleaner.
Thanks Alex

On Sun, Oct 22, 2023, 6:05 PM Alex Murray <2040112 at bugs.launchpad.net>
wrote:

> The fix for intel-microcode is already installed as you can see, and
> correctly identified as such by the pro client:
>
> (2/2) intel-microcode:
> A fix is available in Ubuntu standard updates.
> The update is already installed.
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> The issue here seems to be that the pro client itself is complaining
> that the associated fix for the linux kernel package is not installed.
>
> The CVE page at https://ubuntu.com/security/CVE-2022-40982 shows the fix
> for mantic (Ubuntu 23.10) is still pending, so nothing seems to be amiss
> that I can see.
>
> ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-40982
>
> ** Changed in: intel-microcode (Ubuntu)
>        Status: New => Invalid
>
> ** Information type changed from Private Security to Public
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/2040112
>
> Title:
>   intel-microcode
>
> Status in intel-microcode package in Ubuntu:
>   Invalid
>
> Bug description:
>   pro fix CVE-2022-40982
>   CVE-2022-40982: Linux kernel (BlueField) vulnerabilities
>    - https://ubuntu.com/security/CVE-2022-40982
>
>   2 affected source packages are installed: intel-microcode, linux
>   (1/2) linux:
>   A fix is coming soon. Try again tomorrow.
>   (2/2) intel-microcode:
>   A fix is available in Ubuntu standard updates.
>   The update is already installed.
>
>   1 package is still affected: linux
>   ✘ CVE-2022-40982 is not resolved.
>
>   apt policy intel-microcode
>   intel-microcode:
>     Installed: 3.20230808.1
>     Candidate: 3.20230808.1
>     Version table:
>    *** 3.20230808.1 500
>           500 http://archive.ubuntu.com/ubuntu mantic/main amd64 Packages
>           100 /var/lib/dpkg/status
>
>   ProblemType: Bug
>   DistroRelease: Ubuntu 23.10
>   Package: intel-microcode 3.20230808.1
>   ProcVersionSignature: Ubuntu 6.5.0-9.9-generic 6.5.3
>   Uname: Linux 6.5.0-9-generic x86_64
>   NonfreeKernelModules: nvidia_modeset nvidia zfs
>   ApportVersion: 2.27.0-0ubuntu5
>   Architecture: amd64
>   CasperMD5CheckMismatches: ./md5sum.txt ./boot/grub/i386-pc/eltorito.img
>   CasperMD5CheckResult: fail
>   CurrentDesktop: XFCE
>   Date: Sun Oct 22 10:50:09 2023
>   InstallationDate: Installed on 2023-10-12 (11 days ago)
>   InstallationMedia: Linux Lite 6.6 - Release amd64
>   RebootRequiredPkgs: Error: path contained symlinks.
>   SourcePackage: intel-microcode
>   UpgradeStatus: No upgrade log present (probably fresh install)
>
> To manage notifications about this bug go to:
>
> https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/2040112/+subscriptions
>
>

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to intel-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/2040112

Title:
  intel-microcode

Status in intel-microcode package in Ubuntu:
  Invalid

Bug description:
  pro fix CVE-2022-40982
  CVE-2022-40982: Linux kernel (BlueField) vulnerabilities
   - https://ubuntu.com/security/CVE-2022-40982

  2 affected source packages are installed: intel-microcode, linux
  (1/2) linux:
  A fix is coming soon. Try again tomorrow.
  (2/2) intel-microcode:
  A fix is available in Ubuntu standard updates.
  The update is already installed.

  1 package is still affected: linux
  ✘ CVE-2022-40982 is not resolved.

  apt policy intel-microcode
  intel-microcode:
    Installed: 3.20230808.1
    Candidate: 3.20230808.1
    Version table:
   *** 3.20230808.1 500
          500 http://archive.ubuntu.com/ubuntu mantic/main amd64 Packages
          100 /var/lib/dpkg/status

  ProblemType: Bug
  DistroRelease: Ubuntu 23.10
  Package: intel-microcode 3.20230808.1
  ProcVersionSignature: Ubuntu 6.5.0-9.9-generic 6.5.3
  Uname: Linux 6.5.0-9-generic x86_64
  NonfreeKernelModules: nvidia_modeset nvidia zfs
  ApportVersion: 2.27.0-0ubuntu5
  Architecture: amd64
  CasperMD5CheckMismatches: ./md5sum.txt ./boot/grub/i386-pc/eltorito.img
  CasperMD5CheckResult: fail
  CurrentDesktop: XFCE
  Date: Sun Oct 22 10:50:09 2023
  InstallationDate: Installed on 2023-10-12 (11 days ago)
  InstallationMedia: Linux Lite 6.6 - Release amd64
  RebootRequiredPkgs: Error: path contained symlinks.
  SourcePackage: intel-microcode
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/2040112/+subscriptions