On Mon, Aug 20, 2018 at 02:31:05PM +0100, leloft wrote:
>
> Tue, 14 Aug 2018 21:52:19 +0000
> [SECURITY] [DSA 4272-1] linux security update
> version 4.9.110-3+deb9u2
> Confirmed: ascii-proposed-updates
> Note: this update has been superseded by version 4.9.110-3+deb9u3
> confirmed present in ascii-security.
> Note: jessie-security contains version 4.9.110-3+deb9u2~deb8u1
>
> To fully resolve these vulnerabilities it is also necessary to install
> updated CPU microcode (only available in Debian non-free). Common server
> class CPUs are covered in the update released as DSA 4273-1 (see below).

Any idea how the microcode updates work on a machine with a disabled
management engine?

-- hendrik
>
> Thu, 16 Aug 2018 20:43:21 +0000
> [SECURITY] [DSA 4273-1] intel-microcode security update
> version 3.20180703.2~deb9u1 (non-free)
> Confirmed: ascii-security, ascii-proposed-updates
> Note: ascii-backports contains version 3.20180703.2~bpo9+1
> Note: jessie-security contains version 3.20180703.2~deb8u1
> Note: beowulf and ceres contain version 3.20180703.2