[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20250306055013.roznatsim5uh4bd7@shell.thinkmo.de>
Date: Thu, 6 Mar 2025 06:50:13 +0100
From: Bastian Blank <bblank@...nkmo.de>
To: oss-security@...ts.openwall.com
Subject: Re: Xen Security Notice 2 (CVE-2024-35347) AMD CPU
Microcode Signature Verification Vulnerability
On Thu, Mar 06, 2025 at 05:48:56AM +0100, Solar Designer wrote:
> > First of all, there's an equivalent change in Linux.
> > https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bb2281fb05e50108ce95c43ab7e701ee564565c8
> Oh, I had missed that, thanks!
Who is expected to maintain this list of hashes? Because this sounds
like a huge maintenance hog, as this will now block any security updates
of the microcode.
Bastian
--
It would be illogical to assume that all conditions remain stable.
-- Spock, "The Enterprise Incident", stardate 5027.3
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
